Lucene search

VmwareCVE-2023-34036

HistoryJul 17, 2023 - 11:15 a.m.

CVE-2023-34036

2023-07-1711:15:09

CWE-116

CWE-644

vmware

web.nvd.nist.gov

cve-2023-34036

security

reactive web applications

spring hateoas

webflux

http headers

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don’t have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.

For the application to be affected, it needs to satisfy the following requirements:

It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses.
The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.

Affected configurations

Nvd

Node

vmwarespring_hateoasRange<1.5.5

vmwarespring_hateoasRange2.0.0–2.0.5

vmwarespring_hateoasMatch2.1.0-

vmwarespring_hateoasMatch2.1.0milestone1

vmwarespring_hateoasMatch2.1.0rc1

VendorProductVersionCPE
vmwarespring_hateoas*cpe:2.3:a:vmware:spring_hateoas:*:*:*:*:*:*:*:*
vmwarespring_hateoas2.1.0cpe:2.3:a:vmware:spring_hateoas:2.1.0:-:*:*:*:*:*:*
vmwarespring_hateoas2.1.0cpe:2.3:a:vmware:spring_hateoas:2.1.0:milestone1:*:*:*:*:*:*
vmwarespring_hateoas2.1.0cpe:2.3:a:vmware:spring_hateoas:2.1.0:rc1:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	spring_hateoas	*	cpe:2.3:a:vmware:spring_hateoas::::::::
vmware	spring_hateoas	2.1.0	cpe:2.3:a:vmware:spring_hateoas:2.1.0:-::::::
vmware	spring_hateoas	2.1.0	cpe:2.3:a:vmware:spring_hateoas:2.1.0:milestone1::::::
vmware	spring_hateoas	2.1.0	cpe:2.3:a:vmware:spring_hateoas:2.1.0:rc1::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "Android",
      "ARM",
      "64 bit",
      "iOS",
      "32 bit",
      "x86"
    ],
    "product": "Spring HATEOAS",
    "vendor": "Spring",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.4 or older"
      },
      {
        "status": "affected",
        "version": "2.0.4 or older"
      },
      {
        "status": "affected",
        "version": "2.1.0"
      }
    ]
  }
]