Lucene search

CVE-2017-8046

🗓️ 04 Jan 2018 06:00:00Reported by dellType

Malicious PATCH requests in Spring Data REST and Spring Boo

Reporter	Title	Published	Views	Family All 16
NVD	CVE-2017-8046	4 Jan 201806:29	–	nvd
OSV	CVE-2017-8046	4 Jan 201806:29	–	osv
OSV	Remote code execution in PATCH requests in Spring Data REST	13 May 202201:02	–	osv
Veracode	Arbitrary Code Execution	25 Sep 201705:55	–	veracode
CVE	CVE-2017-8046	4 Jan 201806:29	–	cve
Packet Storm	Spring Data REST PATCH Request Remote Code Execution	15 Mar 201800:00	–	packetstorm
0day.today	Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution Ex	16 Mar 201800:00	–	zdt
Github Security Blog	Remote code execution in PATCH requests in Spring Data REST	13 May 202201:02	–	github
exploitpack	Spring Data REST 2.6.9 (Ingalls SR9) 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution	15 Mar 201800:00	–	exploitpack
RedhatCVE	CVE-2017-8046	8 Mar 201804:49	–	redhatcve

[
  {
    "product": "Pivotal Spring Data REST and Spring Boot",
    "vendor": "Pivotal",
    "versions": [
      {
        "status": "affected",
        "version": "Pivotal Spring Data REST versions prior to 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:2405
exploit-db	www.exploit-db.com/exploits/44289/
pivotal	www.pivotal.io/security/cve-2017-8046
securityfocus	www.securityfocus.com/bid/100948

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2018 06:00Current

9.5High risk

Vulners AI Score9.5

EPSS0.115