Kurz gesagt
- CVE-2017-12881 ist eine Schwachstelle (HOCH (CVSS 8.8)) in org.springframework.batch:spring-batch-admin-manager, spring batch admin (spring batch admin project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.79%, höher als bei 56.6% aller Schwachstellen.
- Abhilfe: auf 1.3.0.RELEASE oder neuer aktualisieren.
Description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
NVD description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Weitere Schwachstellen in org.springframework.batch:spring-batch-admin-manager
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free