PT-2018-1390 · Spring · Spring Framework
Publicado
2018-04-11
·
Atualizado
2022-06-23
·
CVE-2018-1275
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Spring Framework versions 5.0 prior to 5.0.5
Spring Framework versions 4.3 prior to 4.3.16
Spring Framework older unsupported versions
Description
The issue allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user can craft a message to the broker that can lead to a remote code execution attack. The vulnerability is caused by errors in processing STOMP messages in the spring-messaging module, which can allow a remote attacker to gain full control over the application using a specially crafted message.
Recommendations
For Spring Framework versions 5.0 prior to 5.0.5, update to version 5.0.5 or later.
For Spring Framework versions 4.3 prior to 4.3.16, update to version 4.3.16 or later.
For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk of exploitation.
As a temporary workaround, consider disabling the spring-messaging module until a patch is available.
Exploit
Correção
RCE
Code Injection
Improperly Implemented Security Check for Standard
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Spring Framework