'How can CVE-2020-25638 be reproduced?

There was a recent SQL injection bug in hibernate

http://jvn.jp/en/jp/JVN90729322/index.html

I find it intriguing that the error is related to comments. Is that supposed to happen when a query has a parameter inside a comment? What does that even mean?

I haven't found any example on how to reproduce it, or write up. Could someone explain what is the CVE about?

hibernate

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution	Source

'How can CVE-2020-25638 be reproduced?

Sources

Related Questions