CVE-2018-1229: vulnerability in Spring Batch Admin
Published · Updated
Follow this CVE+ Monitor Spring Batch Admin+ Monitor org.springframework.batch:spring-batch-admin-manager
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because Spring Batch Admin has reached end of life.
Affected products
Spring by Pivotal · Spring Batch AdminRelated CVEs — Spring Batch Admin
In the same product, most dangerous first.