CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.
CVE
CVE-2022-31679
Severity
LOW
CVSS
3.7
EPSS
0.48%
Original NVD Description
Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)