CVE-2018-1270

CRITICAL

Vmware Spring Framework < 4.3.16 - Remote Code Execution

Title source: rule

Description

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.

Exploits (6)

nomisec WORKING POC 113 stars
by CaledoniaProject · poc
https://github.com/CaledoniaProject/CVE-2018-1270
nomisec WORKING POC
by Venscor · poc
https://github.com/Venscor/CVE-2018-1270
nomisec STUB
by tafamace · poc
https://github.com/tafamace/CVE-2018-1270
nomisec WORKING POC
by Tom4t0 · poc
https://github.com/Tom4t0/CVE-2018-1270_EXP

References (16)

Scores

CVSS v3 9.8
EPSS 0.9004
EPSS Percentile 99.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-358 CWE-94
Status published
Products (50)
debian/debian_linux 9.0
oracle/application_testing_suite 12.5.0.3
oracle/application_testing_suite 13.1.0.1
oracle/application_testing_suite 13.2.0.1
oracle/application_testing_suite 13.3.0.1
oracle/big_data_discovery 1.6.0
oracle/communications_converged_application_server < 7.0.0.1
oracle/communications_diameter_signaling_router < 8.3
oracle/communications_performance_intelligence_center < 10.2.1
oracle/communications_services_gatekeeper < 6.1.0.4.0
... and 40 more
Published Apr 06, 2018
Tracked Since Feb 18, 2026