云虫漏洞库

CVE-2026-47834 - Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15 - 漏洞详情

漏洞编号:CVE-2026-47834

风险等级:中危

漏洞来源:CVE

CVE 编号:CVE-2026-47834

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:-

发布/更新时间:2026-08-26 / 2026-08-28

漏洞描述

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources.
Spring Data JPA 4.1.0
Spring Data JPA 4.0.0 - 4.0.6
Spring Data JPA 3.5.0 - 3.5.13
Spring Data JPA 3.0.0 - 3.4.15

相关链接

« 返回首页