CVEvulnerability

CVE-2018-11039

5.9 MEDIUM Published 2018-06-25 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2018-06-25
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.

Affected configurations

• vmware spring framework (< 4.3.18) • vmware spring framework (>= 5.0.0 < 5.0.7) • oracle agile product lifecycle management 9.3.3 • oracle agile product lifecycle management 9.3.4 • oracle agile product lifecycle management 9.3.5 • oracle agile product lifecycle management 9.3.6 • oracle application testing suite 12.5.0.3 • oracle application testing suite 13.1.0.1 • oracle application testing suite 13.2.0.1 • oracle application testing suite 13.3.0.1 • oracle communications diameter signaling router (< 8.3) • oracle communications network integrity (>= 7.3.2 <= 7.3.6) • oracle communications online mediation controller 6.1 • oracle communications performance intelligence center (< 10.2.1) • oracle communications services gatekeeper (< 6.1.0.4.0) • oracle communications unified inventory management 7.3.2 • oracle communications unified inventory management 7.3.4 • oracle communications unified inventory management 7.3.5 • oracle communications unified inventory management 7.4.0 • oracle endeca information discovery integrator 3.1.0 • oracle endeca information discovery integrator 3.2.0 • oracle enterprise manager base platform 12.1.0.5.0 • oracle enterprise manager base platform 13.2.0.0.0 • oracle enterprise manager base platform 13.3.0.0.0 • oracle enterprise manager for mysql database 13.2 • oracle enterprise manager ops center 12.3.3 • oracle health sciences information manager 3.0 • oracle healthcare master person index 3.0 • oracle healthcare master person index 4.0 • oracle hospitality guest access 4.2.0 • oracle hospitality guest access 4.2.1 • oracle insurance calculation engine (>= 11.0.0 <= 11.3.1) • oracle insurance calculation engine 10.2 • oracle insurance rules palette 10.0 • oracle insurance rules palette 10.2 • oracle micros lucas 2.9.5 • oracle mysql enterprise monitor (<= 3.4.9.4237) • oracle mysql enterprise monitor (>= 4.0.0 <= 4.0.6.5281) • oracle mysql enterprise monitor (>= 8.0.0 <= 8.0.2.8191) • oracle primavera p6 enterprise project portfolio management 18.8 • oracle retail advanced inventory planning 15.0 • oracle retail assortment planning 14.1 • oracle retail assortment planning 15.0 • oracle retail assortment planning 16.0 • oracle retail clearance optimization engine 14.0.5 • oracle retail customer insights 15.0 • oracle retail customer insights 16.0 • oracle retail financial integration 13.2 • oracle retail financial integration 14.0 • oracle retail financial integration 14.1 • oracle retail financial integration 15.0 • oracle retail financial integration 16.0 • oracle retail integration bus 14.1.2 • oracle retail markdown optimization 13.4.4 • oracle retail predictive application server 14.0.3.26 • oracle retail predictive application server 14.1.3.37 • oracle retail predictive application server 15.0.3..100 • oracle retail predictive application server 16.0 • oracle retail xstore point of service 7.1 • oracle utilities network management system 1.12.0.3 … and 4 more

References