Critical severity · published Apr 11, 2018
CVE-2018-1273
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of…
RansomwareIn wildKEV
9.8
CVSS
97%
EPSS
Yes
On KEV
Description
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)97.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useKnown
Affected products
Which versions
SF
Spring Framework · Spring by Pivotal
Versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions · source: vendor
FS
Financial Services Crime And Compliance Management Studio · Oracle
8.0.8.2.0; 8.0.8.3.0 · source: NVD
IG
Ignite · Apache
1.0.1 through 2.5.0; 1.0.0; 1.0.0 · source: NVD
SD
Spring Data Commons · Broadcom
through 1.12.10; 1.13.0 through 1.13.10; 2.0.0 through 2.0.5 · source: NVD, KEV
SD
Spring Data Rest · Vmware
through 2.5.10; 2.6.0 through 2.6.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1273
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Mailing List
http://mail-archives.apache.org/mod_mbox/ignite-dev/201807.mbox/%3CCAK0qHnqzfzmCDFFi6c5Jok19zNkVCz5Xb4sU%3D0f2J_1i4p46zQ%40mail.gmail.com%3E
Vendor Advisory
https://pivotal.io/security/cve-2018-1273
Patch
https://www.oracle.com/security-alerts/cpujul2022.html
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-1273
More from Spring Framework
9.8
CVE-2018-1270
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a…