Skip to content
OpenAdvisories

Package · Maven

org.springframework.batch:spring-batch-admin-manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2018-1229

    Cross-site Scripting in Pivotal Spring Batch Admin

    Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. Th…

    Spring by Pivotal Spring Batch Admin org.springframework.batch:spring-batch-admin-manager Maven
  • High 8.8
    CVE-2017-12881

    Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality

    Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

    org.springframework.batch:spring-batch-admin-manager Maven
  • Medium 5.4
    CVE-2017-12882

    Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

    Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

    org.springframework.batch:spring-batch-admin-manager Maven