PT-2017-8634 · Spring · Spring Security Oauth

David Vieira-Kurz

+2

·

Publicado

2017-05-25

·

Atualizado

2019-10-16

·

CVE-2016-4977

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Spring Security OAuth versions 1.0.0 through 1.0.5 Spring Security OAuth versions 2.0.0 through 2.0.9
Description The issue allows a malicious user to trigger remote code execution by crafting the value for the response type parameter, which is executed as Spring SpEL when processing authorization requests using the whitelabel views.
Recommendations For versions 1.0.0 through 1.0.5, update to a version that fixes this issue. For versions 2.0.0 through 2.0.9, update to a version that fixes this issue. As a temporary workaround, consider restricting the use of the response type parameter in the affected API endpoint until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2016-4977
GHSA-7Q9C-H23X-65FQ

Produtos afetados

Spring Security Oauth