Spring by Pivotal Spring Framework
En bref
- Source
- NVD
- EPSS
- EPSS 3.06 % · centile 88 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- dell
- Statut NVD
- Modified
Rechercher sur…
Description
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.
Références
- http://www.securityfocus.com/bid/103697
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2018:1320
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://pivotal.io/security/cve-2018-1272
- https://www.oracle.com/security-alerts/cpuoct2021.html
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 6.0 | AV:N/AC:M/Au:S/C:P/I:P/A:P | NVD · nvd@nist.gov (Primary) |
Avis
- GHSA-4487-x383-qpph — Possible privilege escalation in org.springframework:spring-core
Références européennes
- ENISA EUVD · EUVD-2018-0493
- GCVE · GCVE-0-2018-1272
Configurations affectées (CPE NVD)
cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*≥ 4.3.0 < 4.3.15cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*≥ 5.0 < 5.0.5cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:big_data_discovery:1.6.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*< 7.0.0.1cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*< 8.3cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*< 10.2.1cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:*< 6.1.0.4.0cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*cpe:2.3:a:oracle:goldengate_for_big_data:12.2.0.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:goldengate_for_big_data:12.3.1.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:goldengate_for_big_data:12.3.2.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:health_sciences_information_manager:3.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:healthcare_master_person_index:3.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:healthcare_master_person_index:4.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_calculation_engine:10.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_rules_palette:10.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_rules_palette:10.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_rules_palette:10.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_rules_palette:11.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:insurance_rules_palette:11.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_integration_bus:14.0.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_integration_bus:14.0.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_integration_bus:14.0.3:*:*:*:*:*:*:*cpe:2.3:a:oracle:retail_integration_bus:14.0.4:*:*:*:*:*:*:*- +27 autres
Produits affectés
| Produit | Versions |
|---|---|
| Spring by Pivotal · Spring Framework | affected Versions prior to 5.0.5 and 4.3.15 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |