CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-04-11
Spring Data Commons Remote Code Execution (RCE) Vulnerability via SpEL Injection (CVE-2018-1273) Technical Advisory
[Affected Scope] Spring Data Commons versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending specially crafted HTTP request parameters.
[Mitigation] Immediately upgrade Spring Data Commons to version 1.13.11, 2.0.6, or later, and apply input validation controls.