RSS   Podatności dla 'Spring data commons'   RSS

2018-05-11
 
CVE-2018-1259

CWE-611
 
 
Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data's projection-based request payload binding to access arbitrary files on the system.

 
2018-04-18
 
CVE-2018-1274

CWE-770
 
 
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests against Spring Data REST endpoints or endpoints using property path parsing which can cause a denial of service (CPU and memory consumption).

 
2018-04-11
 
CVE-2018-1273

CWE-20
 
 
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

 

 >>> Vendor: Pivotal software 54 Produkty
Mysql
Operations manager
Spring framework
Rabbitmq management
Rabbitmq
Redis
Cloud foundry elastic runtime
Cloud foundry
Cloud foundry ops manager
Cloud foundry uaa
Cloud foundry uaa bosh
Spring data jpa
Cloud foundry cf mysql
Greenplum
Gemfire for pivotal cloud foundry
Spring security
Cf-release
Cloud foundry elastic runtime cf release
Cloud foundry uaa release
Login-server
Cloud foundry cf release
Cloud foundry garden linux
Spring security oauth
Cloud foundry cf
Spring batch admin
Spring social
Uaa-release
Single sign-on for pivotal cloud foundry
Grootfs
Spring advanced message queuing protocol
Cf-deployment
Spring-ldap
Credhub-release
Spring data rest
Cloud foundry uaa-release
Spring boot
Spring data commons
Spring cloud sso connector
Windows stemcells
Spring integration zip
Pivotal application service
Cloud foundry cf-deployment
Cloudfoundry uaa release
Cloudfoundry uaa
Spring batch
Spring integration
Spring web services
Concourse
Cloud foundry cf-release
Application service
Pivotal container service
Bosh cli
Credhub service broker
Spring data java persistance api

Copyright 2024, cxsecurity.com

 

Back to Top