PT-2018-3847 · Spring · Spring Data Commons

Published 2018-03-27 · Updated 2025-10-28 · CVE-2018-1273

Positive Technologies · (AI Summary)

CVSS v3.1

10

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring Data Commons versions prior to 1.13.10 Spring Data Commons versions 2.0 to 2.0.5 Spring Data Commons older unsupported versions

Description The issue is caused by improper neutralization of special elements, leading to a property binder vulnerability. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding, which can lead to a remote code execution attack. The vulnerability is related to insufficient input validation in the SimpleEvaluationContext class of the Spring Data Commons platform and the Spring Data REST framework.

Recommendations For Spring Data Commons versions prior to 1.13.10, update to version 1.13.10 or later. For Spring Data Commons versions 2.0 to 2.0.5, update to version 2.0.6 or later. For Spring Data Commons older unsupported versions, consider upgrading to a supported version and then applying the necessary updates. As a temporary workaround, consider restricting access to Spring Data REST backed HTTP resources and limiting the use of projection-based request payload binding until a patch is available.

Exploit

Fix

RCE

Code Injection

Special Elements Injection

Weakness Enumeration

CWE-20

CWE-94

CWE-74

Related Identifiers

BDU:2022-06726

CVE-2018-1273

GHSA-4FQ3-MR56-CG6R

Affected Products

Spring Data Commons

References · 28

• 🔥 https://github.com/jas502n/cve-2018-1273 · Exploit
• 🔥 https://github.com/wearearima/poc-cve-2018-1273 · Exploit
• 🔥 https://github.com/knqyf263/CVE-2018-1273 · Exploit
• 🔥 https://github.com/webr0ck/poc-cve-2018-1273 · Exploit
• 🔥 https://gist.github.com/matthiaskaiser/bfb274222c009b3570ab26436dc8799e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-1273 · Security Note
• https://osv.dev/vulnerability/GHSA-4fq3-mr56-cg6r · Vendor Advisory
• https://pivotal.io/security/cve-2018-1273 · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2022.html · Patch
• https://bdu.fstec.ru/vul/2022-06726 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1273 · Vendor Advisory
• https://github.com/spring-projects/spring-data-commons/issues/1721 · Note
• https://github.com/spring-projects/spring-data-commons · Note
• https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432a · Note
• https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b653 · Note