Vulnerability Intelligence Report
CVE-2018-1275
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:57.63%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-94 ↗CWE-94 - Code Injection
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Spring by Pivotal | Spring Framework | Versions prior to 5.0.5 and 4.3.16 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
57.632%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Dell · Vendor · USA |
| Reserved | 2017-12-06T00:00:00 |
| Published | 2018-04-11T13:00:00 |
| Patch Date | 2018-04-09 |
| Last Updated | 2024-09-17T02:43:01 |
Community Chatter & Buzz