CVE-2016-4977

🗓️ 25 May 2017 17:00:00Reported by dellType

cve🔗 web.nvd.nist.gov👁 125 Views🌐 WEB

Remote code execution vulnerability in Spring Security OAuth

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2016-4977	20 Jun 202201:10	–	circl
CNVD	Spring Security OAuth Remote Command Execution Vulnerability	27 Aug 201600:00	–	cnvd
Check Point Advisories	Pivotal Spring Security OAuth SpelView Code Execution (CVE-2016-4977)	20 Nov 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-4977	25 May 201717:00	–	cvelist
Github Security Blog	Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views	18 Oct 201818:06	–	github
myhack58	CVE-2 0 1 6-4 9 7 7: RCE in Spring Security Oauth vulnerability analysis-vulnerability warning-the black bar safety net	19 Oct 201600:00	–	myhack58
Nuclei	Spring Security OAuth2 Remote Command Execution	4 Jun 202603:48	–	nuclei
NVD	CVE-2016-4977	25 May 201717:29	–	nvd
OSV	CVE-2016-4977	25 May 201717:29	–	osv
OSV	GHSA-7Q9C-H23X-65FQ Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views	18 Oct 201818:06	–	osv

NVD

Vulners

Node

pivotal spring_security_oauthMatch1.0.0

pivotal spring_security_oauthMatch1.0.1

pivotal spring_security_oauthMatch1.0.2

pivotal spring_security_oauthMatch1.0.3

pivotal spring_security_oauthMatch1.0.4

pivotal spring_security_oauthMatch1.0.5

pivotal spring_security_oauthMatch2.0.0

pivotal spring_security_oauthMatch2.0.1

pivotal spring_security_oauthMatch2.0.2

pivotal spring_security_oauthMatch2.0.3

pivotal spring_security_oauthMatch2.0.4

pivotal spring_security_oauthMatch2.0.5

pivotal spring_security_oauthMatch2.0.6

pivotal spring_security_oauthMatch2.0.7

pivotal spring_security_oauthMatch2.0.8

pivotal spring_security_oauthMatch2.0.9

[
  {
    "product": "Spring Security OAuth",
    "vendor": "Pivotal",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0 to 2.0.9"
      },
      {
        "status": "affected",
        "version": "1.0.0 to 1.0.5"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/0841d849c23418c473ccb9183cbf41a317cb0476e44be48022ce3488%40%3Cdev.fineract.apache.org%3E
pivotal	www.pivotal.io/security/cve-2016-4977
openwall	www.openwall.com/lists/oss-security/2019/10/16/1
lists	www.lists.apache.org/thread.html/5e6dd946635bbcc9e1f2591599ad0fab54f2dc3714196af3b17893f2%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/37d7e820fc65a768de3e096e98382d5529a52a039f093e59357d0bc0%40%3Cdev.fineract.apache.org%3E
lists	www.lists.apache.org/thread.html/96c017115069408cec5e82ce1e6293facab398011f6db7e1befbe274%40%3Cdev.fineract.apache.org%3E

Parameter	Position	Path	Description	CWE
response_type	query param	oauth/authorize	OAuth authorize endpoint processes user-supplied values as SpEL, enabling RCE via crafted parameters.	CWE-19
redirect_uri	query param	oauth/authorize	OAuth authorize endpoint processes user-supplied values as SpEL, enabling RCE via crafted parameters.	CWE-19
client_id	query param	oauth/authorize	OAuth authorize endpoint processes user-supplied values as SpEL, enabling RCE via crafted parameters.	CWE-19
state	query param	oauth/authorize	OAuth authorize endpoint processes user-supplied values as SpEL, enabling RCE via crafted parameters.	CWE-19

13 May 2026 00:24Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 38.8

EPSS0.93658

CWE-19