Em resumo
- CVE-2017-12881 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta org.springframework.batch:spring-batch-admin-manager, spring batch admin (spring batch admin project).
- Chance de exploração nos próximos 30 dias (EPSS): 0.79%, maior que 56.6% das vulnerabilidades.
- Correção: atualize para 1.3.0.RELEASE ou posterior.
Description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
NVD description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Mais vulnerabilidades de org.springframework.batch:spring-batch-admin-manager
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free