Pivotal Software vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pivotal Software products: 1 record(s), with severity, exploitation and fixes.

Spring Data Rest 1

Exploited only (KEV) →

CVE-2018-1273 Critical · 9.8 KEV Urgent · 77 Public exploit Ransomware CWE-94 Apr 11, 2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.