CVE-2018-1273
CRITICAL KEV RANSOMWARE NUCLEISpring Data Commons < 1.13.11 - Unauthenticated Remote Code Execution via Property Binder
Title source: llmExploitation Summary
CVE-2018-1273 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022, with confirmed use in ransomware campaigns. EIP tracks 9 public exploits from researchers including jas502n, wearearima, knqyf263. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2018-1273, a remote code execution vulnerability in Spring Data Commons. The exploit leverages SpEL injection to execute arbitrary commands on the target system.
Description
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.
Exploits (9)
This repository contains a working proof-of-concept exploit for CVE-2018-1273, a remote code execution vulnerability in Spring Data Commons. The exploit leverages SpEL injection to execute arbitrary commands on the target system.
This repository contains a functional proof-of-concept for CVE-2018-1273, demonstrating a property binder vulnerability in Spring Data Commons that allows unauthenticated remote code execution via crafted request parameters.
This repository provides a Dockerized environment to exploit CVE-2018-1273, a SpEL injection vulnerability in Spring Data Commons. The PoC demonstrates remote code execution (RCE) via crafted HTTP requests targeting the `/users/` endpoint.
This repository contains a functional PoC for CVE-2018-1273, a Spring Data Commons vulnerability allowing unauthorized access to data via crafted requests. The vulnerable controller demonstrates the flaw by exposing an endpoint that processes unvalidated input.
This repository contains a functional proof-of-concept for CVE-2018-1273, a property binder vulnerability in Spring Data Commons. The exploit demonstrates remote code execution via crafted request parameters targeting Spring Data REST endpoints.
This repository contains a partial snapshot of Spring Data Commons source code but lacks any exploit code or technical analysis related to CVE-2018-1273. It appears to be a placeholder or incomplete fork.
This repository contains only the source code of Spring Data Commons, specifically the vulnerable version (dc85837) related to CVE-2018-1273. It lacks any exploit code, proof-of-concept, or technical analysis of the vulnerability itself.
This repository contains a functional proof-of-concept for CVE-2018-1273, demonstrating a property binder vulnerability in Spring Data Commons that allows remote code execution via crafted request parameters. The PoC includes a vulnerable Spring Boot application and curl commands to exploit it.
This repository contains a minimal script to run a vulnerable Spring Data REST application in a loop, but lacks actual exploit code or details. It is part of a vulnerable container management tool (Cved).
Nuclei Templates (1)
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H