CVEvulnerability

CVE-2018-1275

9.8 CRITICAL Published 2018-04-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-358, CWE-94

Description

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.

Affected configurations

• vmware spring framework (>= 4.3.0 < 4.3.16) • vmware spring framework (>= 5.0.0 < 5.0.5) • oracle application testing suite 12.5.0.3 • oracle application testing suite 13.1.0.1 • oracle application testing suite 13.2.0.1 • oracle application testing suite 13.3.0.1 • oracle big data discovery 1.6.0 • oracle communications converged application server (< 7.0.0.1) • oracle communications diameter signaling router (< 8.3) • oracle communications performance intelligence center (< 10.2.1) • oracle communications services gatekeeper (< 6.1.0.4.0) • oracle goldengate for big data 12.2.0.1 • oracle goldengate for big data 12.3.1.1 • oracle goldengate for big data 12.3.2.1 • oracle health sciences information manager 3.0 • oracle healthcare master person index 3.0 • oracle healthcare master person index 4.0 • oracle insurance calculation engine 10.1.1 • oracle insurance calculation engine 10.2 • oracle insurance calculation engine 10.2.1 • oracle insurance rules palette 10.0 • oracle insurance rules palette 10.1 • oracle insurance rules palette 10.2 • oracle insurance rules palette 11.0 • oracle insurance rules palette 11.1 • oracle primavera gateway 15.2 • oracle primavera gateway 16.2 • oracle primavera gateway 17.12 • oracle retail customer insights 15.0 • oracle retail customer insights 16.0 • oracle retail open commerce platform 5.3.0 • oracle retail open commerce platform 6.0.0 • oracle retail open commerce platform 6.0.1 • oracle retail order broker 5.1 • oracle retail order broker 5.2 • oracle retail order broker 15.0 • oracle retail order broker 16.0 • oracle retail predictive application server 14.0 • oracle retail predictive application server 14.1 • oracle retail predictive application server 15.0 • oracle retail predictive application server 16.0 • oracle service architecture leveraging tuxedo 12.1.3.0.0 • oracle service architecture leveraging tuxedo 12.2.2.0.0 • oracle tape library acsls 8.4

Related

Weakness · CWE (2)

  • CWE-358 Improperly Implemented Security Check for Standard weakness
  • CWE-94 Improper Control of Generation of Code weakness

References