CVE-2018-1275

CRITICAL

Spring Framework 4.3.0-4.3.15 - Remote Code Execution via STOMP over WebSocket

Title source: llm
STIX 2.1

Description

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.

References (14)

Core 14
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041301
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2939
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:1320
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103771
Patch, Third Party Advisory x_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
Patch, Third Party Advisory x_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujul2020.html
Vendor Advisory x_refsource_confirm
https://pivotal.io/security/cve-2018-1275
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuoct2021.html

Scores

CVSS v3 9.8
EPSS 0.5806
EPSS Percentile 99.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-358 CWE-94
Status published
Products (44)
oracle/application_testing_suite 12.5.0.3
oracle/application_testing_suite 13.1.0.1
oracle/application_testing_suite 13.2.0.1
oracle/application_testing_suite 13.3.0.1
oracle/big_data_discovery 1.6.0
oracle/communications_converged_application_server < 7.0.0.1
oracle/communications_diameter_signaling_router < 8.3
oracle/communications_performance_intelligence_center < 10.2.1
oracle/communications_services_gatekeeper < 6.1.0.4.0
oracle/goldengate_for_big_data 12.2.0.1
... and 34 more
Published Apr 11, 2018
Tracked Since Feb 18, 2026