CVE-2016-4977observed exploitation

CVE-2016-4977: vulnerability in Pivotal Spring Security OAuth

Published · Updated

Follow this CVE+ Monitor Spring Security OAuth+ Monitor org.springframework.security.oauth:spring-security-oauth2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 79%
from disclosure to weapon998 days
Published on NVDMay 25
1st PoC+998d
VulnCheck+2638d
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.
Affected products
Pivotal · Spring Security OAuth
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Pivotal Spring Security OAuth

In the same product, most dangerous first.

CVE-2018-1260—CVE-2018-1260EPSS 10.6%CVE-2018-15758CRITICALPrivilege Escalation in spring-security-oauth2EPSS 2.2%