CVE-2022-31679 in Spring Data REST
Riassunto
di MITRE • 21/09/2022
Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
VulDB is the best source for vulnerability data and more expert information about this specific topic.