{"schema_version":"1.7.3","id":"GHSA-8grg-q944-cch5","published":"2022-02-10T23:05:04Z","modified":"2024-06-27T18:20:05.068274Z","aliases":["CVE-2019-14900"],"summary":"SQL Injection in Hibernate ORM","details":"A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","affected":[{"package":{"name":"org.hibernate:hibernate-core","ecosystem":"Maven","purl":"pkg:maven/org.hibernate/hibernate-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18"}]}],"versions":["3.3.0.CR1","3.3.0.CR2","3.3.0.GA","3.3.0.SP1","3.3.1.GA","3.3.2.GA","3.5.0-Beta-2","3.5.0-Beta-3","3.5.0-Beta-4","3.5.0-CR-1","3.5.0-CR-2","3.5.0-Final","3.5.0.Beta-1","3.5.1-Final","3.5.2-Final","3.5.3-Final","3.5.4-Final","3.5.5-Final","3.5.6-Final","3.6.0.Beta1","3.6.0.Beta2","3.6.0.Beta3","3.6.0.Beta4","3.6.0.CR1","3.6.0.CR2","3.6.0.Final","3.6.1.Final","3.6.10.Final","3.6.2.Final","3.6.3.Final","3.6.4.Final","3.6.5.Final","3.6.6.Final","3.6.7.Final","3.6.8.Final","3.6.9.Final","4.0.0.Alpha1","4.0.0.Alpha2","4.0.0.Alpha3","4.0.0.Beta1","4.0.0.Beta2","4.0.0.Beta3","4.0.0.Beta4","4.0.0.Beta5","4.0.0.CR1","4.0.0.CR2","4.0.0.CR3","4.0.0.CR4","4.0.0.CR5","4.0.0.CR6","4.0.0.CR7","4.0.0.Final","4.0.1.Final","4.1.0.Final","4.1.1.Final","4.1.10.Final","4.1.11.Final","4.1.12.Final","4.1.2","4.1.2.Final","4.1.3.Final","4.1.4.Final","4.1.5.Final","4.1.5.SP1","4.1.6.Final","4.1.7.Final","4.1.8.Final","4.1.9.Final","4.2.0.CR1","4.2.0.CR2","4.2.0.Final","4.2.0.SP1","4.2.1.Final","4.2.10.Final","4.2.11.Final","4.2.12.Final","4.2.13.Final","4.2.14.Final","4.2.15.Final","4.2.16.Final","4.2.17.Final","4.2.18.Final","4.2.19.Final","4.2.2.Final","4.2.20.Final","4.2.21.Final","4.2.3.Final","4.2.4.Final","4.2.5.Final","4.2.6.Final","4.2.7.Final","4.2.7.SP1","4.2.8.Final","4.2.9.Final","4.3.0.Beta1","4.3.0.Beta2","4.3.0.Beta3","4.3.0.Beta4","4.3.0.Beta5","4.3.0.CR1","4.3.0.CR2","4.3.0.Final","4.3.1.Final","4.3.10.Final","4.3.11.Final","4.3.2.Final","4.3.3.Final","4.3.4.Final","4.3.5.Final","4.3.6.Final","4.3.7.Final","4.3.8.Final","4.3.9.Final","5.0.0.Beta1","5.0.0.Beta2","5.0.0.CR1","5.0.0.CR2","5.0.0.CR3","5.0.0.CR4","5.0.0.Final","5.0.1.Final","5.0.10.Final","5.0.11.Final","5.0.12.Final","5.0.2.Final","5.0.3.Final","5.0.4.Final","5.0.5.Final","5.0.6.Final","5.0.7.Final","5.0.8.Final","5.0.9.Final","5.1.0.Final","5.1.1.Final","5.1.10.Final","5.1.11.Final","5.1.12.Final","5.1.13.Final","5.1.14.Final","5.1.15.Final","5.1.16.Final","5.1.17.Final","5.1.2.Final","5.1.3.Final","5.1.4.Final","5.1.5.Final","5.1.6.Final","5.1.7.Final","5.1.8.Final","5.1.9.Final","5.2.0.Final","5.2.1.Final","5.2.10.Final","5.2.11.Final","5.2.12.Final","5.2.13.Final","5.2.14.Final","5.2.15.Final","5.2.16.Final","5.2.17.Final","5.2.18.Final","5.2.2.Final","5.2.3.Final","5.2.4.Final","5.2.5.Final","5.2.6.Final","5.2.7.Final","5.2.8.Final","5.2.9.Final","5.3.0.Beta1","5.3.0.Beta2","5.3.0.CR1","5.3.0.CR2","5.3.0.Final","5.3.1.Final","5.3.10.Final","5.3.11.Final","5.3.12.Final","5.3.13.Final","5.3.14.Final","5.3.15.Final","5.3.16.Final","5.3.17.Final","5.3.2.Final","5.3.3.Final","5.3.4.Final","5.3.5.Final","5.3.6.Final","5.3.7.Final","5.3.8.Final","5.3.9.Final"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8grg-q944-cch5/GHSA-8grg-q944-cch5.json"}},{"package":{"name":"org.hibernate:hibernate-core","ecosystem":"Maven","purl":"pkg:maven/org.hibernate/hibernate-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.0"},{"fixed":"5.4.18"}]}],"versions":["5.4.0.Final","5.4.1.Final","5.4.10.Final","5.4.11.Final","5.4.12.Final","5.4.13.Final","5.4.14.Final","5.4.15.Final","5.4.16.Final","5.4.17.Final","5.4.2.Final","5.4.3.Final","5.4.4.Final","5.4.5.Final","5.4.6.Final","5.4.7.Final","5.4.8.Final","5.4.9.Final"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8grg-q944-cch5/GHSA-8grg-q944-cch5.json"}},{"package":{"name":"org.hibernate:hibernate-core","ecosystem":"Maven","purl":"pkg:maven/org.hibernate/hibernate-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0.Alpha1"},{"fixed":"5.5.0.Beta1"}]}],"versions":["5.5.0.Alpha1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8grg-q944-cch5/GHSA-8grg-q944-cch5.json"}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14900"},{"type":"WEB","url":"https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4"},{"type":"WEB","url":"https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da"},{"type":"WEB","url":"https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f"},{"type":"WEB","url":"https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666499"},{"type":"PACKAGE","url":"https://github.com/hibernate/hibernate-orm"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E"},{"type":"WEB","url":"https://security.netapp.com/advisory/ntap-20220210-0020"}],"database_specific":{"cwe_ids":["CWE-89"],"github_reviewed":true,"github_reviewed_at":"2021-05-11T17:45:44Z","nvd_published_at":"2020-07-06T19:15:00Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}