High
Security advisory
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-25638
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:36 UTC · Revision 1
Source evidence
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
osv:CVE-2020-25638
Complete source record
{
"id": "9f44ad9fdd7917f23d5a89ee886e1cf2b07abf9290b094a8e3c9a2d4176a34f6",
"url": "https://osv.dev/vulnerability/CVE-2020-25638",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-25638",
"summary": "A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.",
"evidence": "osv:CVE-2020-25638",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-25638",
"aliases": [
"CVE-2020-25638",
"GHSA-j8jw-g6fq-mp7h"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/hibernate/hibernate-orm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "64be512b7d8e54ff8d2b9f917bc4c03c6f7bd26b"
},
{
"introduced": "7759404259a8715927485fa1bc051da1f0dc9d9b"
},
{
"fixed": "0b5d3a2acc9e0fa0a83fa69a1a0146b5a6eda61b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:hibernate:hibernate_orm:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "5.3.20"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hibernate:hibernate_orm:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.4.0"
},
{
"fixed": "5.4.24"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"5.3.19",
"5.4.23",
"5.4.22",
"5.4.21",
"5.4.20",
"5.3.18",
"5.4.19",
"5.4.18",
"5.4.17",
"5.4.16",
"5.4.15",
"5.3.17",
"5.4.14",
"5.3.16",
"5.4.13",
"5.4.12",
"5.4.11",
"5.3.15",
"5.4.10",
"5.4.9",
"5.3.14",
"5.4.8",
"5.4.7",
"5.3.13",
"5.4.6",
"5.4.5",
"5.3.12",
"5.3.11",
"5.4.4",
"5.4.3",
"5.3.10",
"5.4.2",
"5.3.9",
"5.3.8",
"5.4.1",
"5.4.0",
"5.3.7",
"5.3.6",
"5.3.5",
"5.3.4",
"5.3.3",
"5.3.2",
"5.3.1",
"5.3.0.Final",
"5.3.0.CR2",
"5.3.0.Beta2",
"5.3.0.Beta1",
"5.2.12",
"5.2.11",
"5.2.10",
"5.2.9",
"5.2.8",
"5.2.7",
"5.2.6",
"5.2.5",
"5.2.4",
"5.2.3",
"5.2.2",
"5.2.1",
"5.2.0",
"5.1.0",
"5.0.0.Final",
"5.0.0.CR4",
"5.0.0.CR3",
"5.0.0.CR2",
"5.0.0.CR1",
"5.0.0.Beta2",
"5.0.0.Beta1",
"4.3.6.Final",
"4.3.5.Final",
"4.3.4.Final",
"4.3.3.Final",
"4.3.2.Final",
"4.3.1.Final",
"4.3.0.CR2",
"4.3.0.CR1",
"4.3.0.Beta5",
"4.3.0.Beta4",
"4.3.0.Beta3",
"4.3.0.Beta2",
"4.3.0.Beta1",
"4.1.5.SP1",
"4.1.5.Final",
"4.1.4.Final",
"4.1.3.Final",
"4.1.2.Final",
"4.1.2",
"4.1.1",
"4.1.0.Final",
"4.0.1",
"4.0.0.Final",
"4.0.0.CR7",
"4.0.0.CR6",
"4.0.0.CR5",
"4.0.0.CR4",
"4.0.0.CR3",
"4.0.0.CR2",
"4.0.0.CR1",
"4.0.0.Beta5",
"4.0.0.Beta4",
"4.0.0.Beta3",
"4.0.0.Beta2",
"4.0.0.Beta1",
"4.0.0.Alpha2",
"4.0.0.Alpha1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25638.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/quarkusio/quarkus",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "8dfdb5700ae66f7787d86c2ad5bca194b8dfb64f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.9.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"1.9.2.Final"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25638.json"
}
}
],
"modified": "2026-10-24T10:30:20.793910687Z",
"provider": "osv",
"references": [
"https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E",
"https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df%40%3Ccommits.turbine.apache.org%3E",
"https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html",
"https://www.debian.org/security/2021/dsa-4908",
"https://bugzilla.redhat.com/show_bug.cgi?id=1881353",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://www.oracle.com/security-alerts/cpuapr2022.html",
"https://www.oracle.com/security-alerts/cpujul2022.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:communications_cloud_native_core_console",
"extracted_events": [
{
"range": [
{
"introduced": "1.9.0"
},
{
"last_affected": "1.9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:retail_customer_management_and_segmentation_foundation",
"extracted_events": [
{
"range": [
{
"introduced": "19.0"
},
{
"last_affected": "19.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-25638",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 430339,
"published_at": "2020-12-02T15:15:12.377+00:00"
}