Vulnerabilidades de Pivotal Software
CVEs publicadas que afetam produtos de Pivotal Software: 1 registro(s), com severidade, exploração e correções.
CVE-2018-1273
Crítica · 9.8
KEV Urgente · 77 Exploit público Ransomware CWE-94 11/04/2018
VMware Tanzu Spring Data Commons Property Binder Vulnerability
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.