org.springframework.batch:spring-batch-admin-manager

2 results · Clear filters · Feed

• Medium 6.1
  CVE-2018-1229

  Cross-site Scripting in Pivotal Spring Batch Admin

  Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. Th…

  Spring by Pivotal Spring Batch Admin org.springframework.batch:spring-batch-admin-manager Maven
  Mar 21, 2018
• Medium 5.4
  CVE-2017-12882

  Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

  Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

  org.springframework.batch:spring-batch-admin-manager Maven
  Aug 18, 2017