IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.8Crítica KEV Usada en ransomware

CVE-2018-1273VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring by Pivotal Spring Framework Publicada: (hace 8 años)

Explotación conocida — VMware Tanzu Spring Data Commons Property Binder Vulnerability

CISA confirmó el 25.03.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 15.04.2022.

Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2018-1273

Descripción

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

Debilidad (CWE): CWE-94

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
apache ignite 1.0.1 – ≤ 2.5.0
broadcom spring data commons ≤ 1.12.10
oracle financial services crime and compliance management studio 8.0.8.2.0
pivotal software spring data rest 3.0.0 – ≤ 3.0.5
Spring by Pivotal Spring Framework Versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions
vmware spring data rest ≤ 2.5.10

Referencias y parches

Coincidencias CPE (NVD) (11)
  • cpe:2.3:a:broadcom:spring_data_commons:*:*:*:*:*:*:*:* ≤ 1.12.10
  • cpe:2.3:a:broadcom:spring_data_commons:*:*:*:*:*:*:*:* ≥ 1.13.0 ≤ 1.13.10
  • cpe:2.3:a:broadcom:spring_data_commons:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.0.5
  • cpe:2.3:a:pivotal_software:spring_data_rest:*:*:*:*:*:*:*:* ≥ 3.0.0 ≤ 3.0.5
  • cpe:2.3:a:vmware:spring_data_rest:*:*:*:*:*:*:*:* ≤ 2.5.10
  • cpe:2.3:a:vmware:spring_data_rest:*:*:*:*:*:*:*:* ≥ 2.6.0 ≤ 2.6.10
  • cpe:2.3:a:apache:ignite:*:*:*:*:*:*:*:* ≥ 1.0.1 ≤ 2.5.0
  • cpe:2.3:a:apache:ignite:1.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:apache:ignite:1.0.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*

CVE recientes del mismo producto — Spring Framework / Boot

3.7Baja
CVE-2026-59314

Spring Framework response splitting in ContentDisposition

Spring Spring Framework

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.2…

6.1Media
CVE-2026-59281

Spring Framework Cross-site Scripting via EscapedErrors

Spring Spring Framework

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors are vulnerable to arbitrary HTML/JavaScrip…