Description
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Remediation
References
http://www.openwall.com/lists/oss-security/2017/08/16/5
http://www.securityfocus.com/bid/100410
Related Vulnerabilities
CVE-2020-7632 Vulnerability in npm package node-mpv
CVE-2021-38555 Vulnerability in maven package org.apache.any23:apache-any23-core
CVE-2023-0044 Vulnerability in maven package io.quarkus:quarkus-vertx-http
CVE-2023-37942 Vulnerability in maven package org.jenkins-ci.plugins:external-monitor-job
CVE-2020-36182 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind