CVE-2018-1230: CSRF

Published Mar 21, 2018

Updated

Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch Admin. This issue has not been patched because Spring Batch Admin has reached end of life.

Affected Software

1 affected component

Pivotal Software Spring Batch Admin

Event History

Mar 21, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1230?

CVE-2018-1230 is classified as a medium severity vulnerability due to the potential for unauthorized actions through cross-site request forgery.

How do I fix CVE-2018-1230?

There is no fix available for CVE-2018-1230 because the Spring Batch Admin is no longer maintained and has reached end of life.

Who is affected by CVE-2018-1230?

All versions of Pivotal Spring Batch Admin are affected by CVE-2018-1230.

What type of vulnerability is CVE-2018-1230?

CVE-2018-1230 is a cross-site request forgery (CSRF) vulnerability.

Can CVE-2018-1230 be exploited remotely?

Yes, CVE-2018-1230 can be exploited by a remote unauthenticated user through a malicious website.