Vulnerabilidades do Pivotal Software Spring Data Rest

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Pivotal Software Spring Data Rest: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:pivotal_software:spring_data_rest

CVE-2018-1273 Crítica · 9.8 KEV Urgente · 77 Exploit público Ransomware CWE-94 11/04/2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.