CVE-2019-14900

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.

Published: Jul 6, 2020
Updated: Nov 8, 2023
CVE: CVE-2019-14900
GHSA: GHSA-8grg-q944-cch5
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
hibernate / hibernate_orm	-	5.3.18
hibernate / hibernate_orm	5.4.0	5.4.18
redhat / decision_manager	7.0	7.0.x
redhat / openstack	10	10.x
redhat / jboss_data_grid	7.0.0	7.0.0.x
redhat / openstack	14	14.x
redhat / openstack	13	13.x
redhat / fuse	-	7.8.0
quarkus / quarkus	-	1.5.2.x
redhat / jboss_enterprise_application_platform	7.3	7.3.x
redhat / jboss_enterprise_application_platform	7.4	7.4.x
redhat / jboss_enterprise_application_platform	7.2	7.2.x
org.infinispan / infinispan-hibernate-cache-v53	-	5.3.18
org.infinispan / infinispan-hibernate-cache-v53	5.4.0	5.4.18
org.infinispan / infinispan-hibernate-cache-v53	5.5.0.Alpha1	5.5.0

Vulnerability Database

289,598

CVE-2019-14900