PT-2018-11351 · Spring · Spring Framework
Published
2018-04-06
·
Updated
2022-06-23
·
CVE-2018-1272
CVSS v3.1
7.5
High
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Spring Framework versions 5.0 prior to 5.0.5
Spring Framework versions 4.3 prior to 4.3.15
Spring Framework older unsupported versions
Description
The issue allows an attack where an extra multipart is inserted in the content of a request, causing the server to use the wrong value for a part it expects. This could lead to privilege escalation, for example, if the part content represents a
username or user roles. The problem occurs when a Spring MVC or Spring WebFlux server application receives input from a remote client and then uses that input to make a multipart request to another server.Recommendations
For Spring Framework versions 5.0 prior to 5.0.5, update to version 5.0.5 or later.
For Spring Framework versions 4.3 prior to 4.3.15, update to version 4.3.15 or later.
For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk. As a temporary workaround, consider restricting the use of multipart requests to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Spring Framework