Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-14900. PoCs published by shanika04.
AI-analyzed exploit summary This repository appears to be a fork of the Hibernate ORM project with no exploit-specific code or analysis for CVE-2019-14900. It contains standard project files like .travis.yml, CONTRIBUTING.md, and README.md, but no PoC, scanner, or technical writeup related to the vulnerability.
Description
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.
Exploits (1)
This repository appears to be a fork of the Hibernate ORM project with no exploit-specific code or analysis for CVE-2019-14900. It contains standard project files like .travis.yml, CONTRIBUTING.md, and README.md, but no PoC, scanner, or technical writeup related to the vulnerability.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N