CVE-2024-49203GHSA-6Q3Q-6V5J-H6VG
Querydsl 5.1.0 and OpenFeign Querydsl 6.8 allows SQL/HQL injection in orderBy in JPAQuery.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.10.1, 5.6.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: poc
- Automatable: yes
- Technical impact: total
Summary
Querydsl 5.1.0 and OpenFeign Querydsl 6.8 allows SQL/HQL injection in orderBy in JPAQuery. NOTE: this is disputed by a Querydsl community member because the product is not intended to defend against a developer who uses untrusted input directly in query construction.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- io.github.openfeign.querydsl:querydsl-jpaMaven
From 6.0.0.M1 · fixed in 6.10.1
- io.github.openfeign.querydsl:querydsl-aptMaven
From 6.0.0.M1 · fixed in 6.10.1
- io.github.openfeign.querydsl:querydsl-jpaMaven
fixed in 5.6.1
- io.github.openfeign.querydsl:querydsl-aptMaven
fixed in 5.6.1
- com.querydsl:querydsl-jpaMaven
through 5.1.0
- com.querydsl:querydsl-aptMaven
through 5.1.0