Pivotal Software Spring Data Rest vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pivotal Software Spring Data Rest: 1 record(s), with affected versions and fixes.
cpe:2.3:a:pivotal_software:spring_data_rest

CVE-2018-1273 Critical · 9.8 KEV Urgent · 77 Public exploit Ransomware CWE-94 Apr 11, 2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.