CVE-2018-1271

MEDIUMNuclei

Path Traversal in org.springframework:spring-core

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2018-1271 has a selected CVSS score of 5.9 (medium); EIP currently links 1 Nuclei template.

Description

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Spring Framework

Browse Spring by Pivotal / Spring Framework
CVE ListVersions prior to 5.0.5 and 4.3.15affected

org.springframework:spring-core

Browse Maven / org.springframework:spring-core
GitHub Advisory5.0.0 to < 5.0.5 · Fixed in 5.0.5affected
Before 4.3.15 · Fixed in 4.3.15affected

Nuclei templates

1
ProjectDiscoveryMEDIUMSpring MVC Framework - Local File InclusionCVSS 5.9

Spring MVC Framework versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported are vulnerable to local file inclusion because they allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). A malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.

Impact

Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.

Remediation

Apply the latest security patches and updates provided by the Spring MVC Framework to mitigate this vulnerability.

WeaknessesCWE-22
Authorshetroublemakr
Template tagscvecve2018springlfitraversalvmwarevuln
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
https://medium.com/@knownsec404team/analysis-of-spring-mvc-directory-traversal-vulnerability-cve-2018-1271-b291bdb6be0d https://pivotal.io/security/cve-2018-1271 https://access.redhat.com/errata/RHSA-2018:1320 https://nvd.nist.gov/vuln/detail/CVE-2018-1271 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Source: ProjectDiscovery

References

Showing 12 of 21