CVE-2018-1229: XSS
First published: Wed Mar 21 2018(Updated: )
Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because Spring Batch Admin has reached end of life.
Credit: security_alert@emc.com security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pivotal Software Spring Batch Admin | ||
| maven/org.springframework.batch:spring-batch-admin-manager | <=2.0.0.M1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-4cj8-779h-r25h
- alias/CVE-2018-1229
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- collector/github-advisory
- source/GitHub
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- vendor/pivotal software
- canonical/pivotal software spring batch admin
- package-manager/maven