Vendor

Spring by Pivotal

9 known vulnerabilities.

Products

Spring Framework 6 Spring Batch Admin 2 Spring Security 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.9

CVE-2018-1271 Scanner template EPSS 30%

Path Traversal in org.springframework:spring-core

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on …

Spring by Pivotal Spring Framework org.springframework:spring-core Maven

Apr 6, 2018
Medium 6.1

CVE-2018-1229

Cross-site Scripting in Pivotal Spring Batch Admin

Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. Th…

Spring by Pivotal Spring Batch Admin org.springframework.batch:spring-batch-admin-manager Maven

Mar 21, 2018