PT-2018-11351 · Spring · Spring Framework

Published

2018-04-06

·

Updated

2022-06-23

·

CVE-2018-1272

CVSS v3.1

7.5

High

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.0 prior to 5.0.5 Spring Framework versions 4.3 prior to 4.3.15 Spring Framework older unsupported versions
Description The issue allows an attack where an extra multipart is inserted in the content of a request, causing the server to use the wrong value for a part it expects. This could lead to privilege escalation, for example, if the part content represents a username or user roles. The problem occurs when a Spring MVC or Spring WebFlux server application receives input from a remote client and then uses that input to make a multipart request to another server.
Recommendations For Spring Framework versions 5.0 prior to 5.0.5, update to version 5.0.5 or later. For Spring Framework versions 4.3 prior to 4.3.15, update to version 4.3.15 or later. For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk. As a temporary workaround, consider restricting the use of multipart requests to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2018-1272
GHSA-4487-X383-QPPH

Affected Products

Spring Framework