CVE-2018-1275

 

Published at: - 11-04-2018 03:29

Last modified: - 23-06-2022 06:35

Total changes: - 6

Description

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://pivotal.io/security/cve-2018-1275
• 103771-Third Party Advisory, VDB Entry
• RHSA-2018:1320-Third Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• 1041301-Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• RHSA-2018:2939-Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• [activemq-issues] 20190703 [jira] [Created] (AMQ-7236) SEV-1 Security vulnerability in spring-expression-4.3.11.RELEASE.jar (spring framework)-Mailing List, Third Party Advisory
• [activemq-issues] 20190703 [jira] [Updated] (AMQ-7236) SEV-1 Security vulnerability in spring-expression-4.3.11.RELEASE.jar (spring framework) and xstream-1.4.10.jar-Mailing List, Third Party Advisory
• [activemq-issues] 20190718 [jira] [Updated] (AMQ-7236) SEV-1 Security vulnerability in spring-expression-4.3.11.RELEASE.jar (spring framework) and xstream-1.4.10.jar-Mailing List, Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/security-alerts/cpuoct2021.html

 

Keywords

NVD

 

CVE-2018-1275

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures