Description

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

Remediation

References

http://www.openwall.com/lists/oss-security/2017/08/16/5

http://www.securityfocus.com/bid/100410

Related Vulnerabilities

CVE-2022-45689 Vulnerability in maven package cn.hutool:hutool-json

CVE-2021-4279 Vulnerability in maven package org.webjars.npm:fast-json-patch

CVE-2020-36048 Vulnerability in maven package org.webjars.bower:engine.io

CVE-2019-12406 Vulnerability in maven package org.apache.cxf:cxf-core

CVE-2020-27216 Vulnerability in maven package jetty:jetty

Severity

Critical

Classification

CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Mailing List Third Party Advisory VDB Entry