Archive

11 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /11 June 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-1260 Public exploit EPSS 11%

Spring Security OAuth vulnerable to remote code execution (RCE)

Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to t…

Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven

May 11, 2018