springframework-social Cross-Site Request Forgery vulnerability

높음 8.8CVE-2015-5258 · GHSA-w5r6-gx3q-hmxj · Published 22/08/2017 · updated 17/06/2026

요약

CVE-2015-5258은(는) org.springframework.social:spring-social-core, spring social (vmware)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.76%, 전체 취약점의 55.3%보다 높음.
조치: 1.1.3.RELEASE, 1.1.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.springframework.social:spring-social-core Maven	`< 1.1.3.RELEASE`	`1.1.3.RELEASE`
spring social vmware	`< 1.1.3`	`1.1.3`

Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.

NVD description

Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.