title: How can CVE-2020-25638 be reproduced?
body: <p>There was a recent SQL injection bug in hibernate</p>
  <p><a href="http://jvn.jp/en/jp/JVN90729322/index.html" rel="nofollow noreferrer">http://jvn.jp/en/jp/JVN90729322/index.html</a></p>
  <p>I find it intriguing that the error is related to comments. Is that supposed to happen when a query has a parameter inside a comment? What does that even mean?</p>
  <p>I haven't found any example on how to reproduce it, or write up. Could someone explain what is the CVE about?</p>