Description

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

Remediation

References

http://www.openwall.com/lists/oss-security/2017/08/16/5

http://www.securityfocus.com/bid/100410

Related Vulnerabilities

CVE-2022-36904 Vulnerability in maven package org.jenkins-ci.plugins:repository-connector

CVE-2022-36437 Vulnerability in maven package com.hazelcast.jet:hazelcast-jet

CVE-2021-32684 Vulnerability in npm package magento-scripts

CVE-2023-20873 Vulnerability in maven package org.springframework.boot:spring-boot-actuator-autoconfigure

CVE-2017-9735 Vulnerability in maven package org.eclipse.jetty:jetty-util

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Mailing List Third Party Advisory VDB Entry CWE-352