Description

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

Remediation

References

http://www.openwall.com/lists/oss-security/2017/08/16/5

http://www.securityfocus.com/bid/100410

Related Vulnerabilities

CVE-2020-7733 Vulnerability in maven package org.webjars.bowergithub.faisalman:ua-parser-js

CVE-2019-0192 Vulnerability in maven package org.apache.solr:solr-core

CVE-2023-37957 Vulnerability in maven package io.jenkins.plugins:pipeline-restful-api

CVE-2021-32854 Vulnerability in npm package textangular

CVE-2023-4863 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Mailing List Third Party Advisory VDB Entry