org.opencredo.cloud.storage:cloud-storage-spring-integration-support (1.1), org.opencredo.cloud.storage:quote-sample (1.1) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (1.0.3.release)

org.springframework.integration:spring-integration-file MAVEN version 1.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.batch:spring-batch-admin-manager (1.2.0.release), org.springframework.integration:spring-integration-ftp (2.0.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.0.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.batch:spring-batch-admin-manager (>=1.2.1.release, <=1.2.2.release), org.springframework.integration:spring-integration-ftp (2.0.3.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.3.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.2.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =0.0.1,...

EUVD-2017-4405

Malware in sbrugna...

EUVD-2017-4406

Malware in sbrugna...

EUVD-2018-11863

Malware in sbrugna...

EUVD-2022-2359

Malicious code in bioql PyPI...

Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality

Cross-site request forgery CSRF vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability...

Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

Stored Cross-site scripting XSS vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality...

GHSA-274R-P6V6-FHH4 Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality

Cross-site request forgery CSRF vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability...

GHSA-49MJ-77Q5-QW5G Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

Stored Cross-site scripting XSS vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality...

GHSA-4CJ8-779H-R25H Cross-site Scripting in Pivotal Spring Batch Admin

Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because...

gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8), org.springframework.xd:spring-xd-rest-client (>=1.0.3.release, <=1.0.4.release) +2 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.0.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: -...

com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), org.springframework.cloud.dist:spring-cloud-dataflow-server-yarn-dist (1.0.0.release) +21 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.1.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =1.3.1.release,...

Cross-site Scripting in Pivotal Spring Batch Admin

Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because...

org.springframework.batch:spring-batch-admin-manager (1.0.0.release), org.springframework.batch:spring-batch-integration (1.0.0.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.1.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager 1.0.0.releas...

org.springframework.batch:spring-batch-admin-manager (1.2.0.release), org.springframework.batch:spring-batch-integration (1.2.0.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.5.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager 1.2.0.releas...

org.springframework.batch:spring-batch-admin-manager (>=1.2.1.release, <=1.2.2.release), org.springframework.batch:spring-batch-integration (>=1.2.1.release, <=1.2.2.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.7.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager...

Pivotal Spring Batch Admin Cross-Site Scripting Vulnerability

Pivotal Spring Batch Admin is the U.S. Pivotal Software's set of open source tools for monitoring and managing the Spring Batch system . A cross-site scripting vulnerability exists in the file upload feature in Pivotal Spring Batch Admin. A remote attacker can exploit this vulnerability by sendin...