En resumen
- CVE-2017-12881 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a org.springframework.batch:spring-batch-admin-manager, spring batch admin (spring batch admin project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.79%, mayor que el 56.6% de las vulnerabilidades.
- Solución: actualizar a 1.3.0.RELEASE o posterior.
Description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
NVD description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Más vulnerabilidades de org.springframework.batch:spring-batch-admin-manager
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free