In breve
- CVE-2017-12881 è una vulnerabilità ALTO (CVSS 8.8) che riguarda org.springframework.batch:spring-batch-admin-manager, spring batch admin (spring batch admin project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.79%, superiore al 56.6% delle vulnerabilità.
- Correzione: aggiornare a 1.3.0.RELEASE o successiva.
Description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
NVD description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Altre vulnerabilità di org.springframework.batch:spring-batch-admin-manager
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free