Improperly Implemented Security Check for Standard in org.springframework:spring-core. Versions 5.0 prior to 5.0.5 and 4.3 prior to 4.3.16 and older unsupported versions allow remote code execution via crafted STOMP over WebSocket messages
Reporter | Title | Published | Views | Family All 54 |
---|---|---|---|---|
![]() | CVE-2018-1275 | 11 Apr 201813:29 | – | debiancve |
![]() | CVE-2018-1270 | 6 Apr 201813:29 | – | debiancve |
![]() | Remote Code Execution (RCE) | 10 Apr 201805:18 | – | veracode |
![]() | Remote Code Execution (RCE) | 6 Apr 201801:07 | – | veracode |
![]() | CVE-2018-1275 | 11 Apr 201813:00 | – | cvelist |
![]() | CVE-2018-1270 | 6 Apr 201813:00 | – | cvelist |
![]() | CVE-2018-1275 | 11 Apr 201813:29 | – | osv |
![]() | Spring Framework allows applications to expose STOMP over WebSocket endpoints | 17 Oct 201820:05 | – | osv |
![]() | CVE-2018-1270 | 6 Apr 201813:29 | – | osv |
![]() | libspring-java - security update | 23 Apr 202100:00 | – | osv |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo