THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2018-1273 (CRITICAL 9.8) — Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted

[NVD] CVE-2018-1273 (CRITICAL 9.8) — Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted

lownvdPublished 2018-04-11

CVE-2018-1273 CVSS: 9.8 CRITICAL Published: 2018-04-11T13:29:00.290

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed

Indicators of compromise

CVE-2018-1273cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2018-1273