136 matches found
CVE-2018-1273
CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...
CVE-2018-1273
CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build $ docker build -t cve-2018-1273 . Run $ docker run -d -p 8080:8080...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versiones anteriores a 1.13 hasta 1.13.10, 2.0 hasta 2.0.5, y versiones antiguas no soportadas, contienen una vulnerabilidad de enlace de propiedades causada por una neutralización incorrecta de elementos especiales. Un usuario malicioso remoto no autenticado o...
CLEANSTART-2026-VJ67556 Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...
Security vulnerability affects the apache-nifi package. Spring Data Commons contains a vulnerability that can lead to a Denial of Service DoS condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially crafted...
CLEANSTART-2026-PG68728 Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters
Security vulnerability affects the apache-nifi package. Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters...
CLEANSTART-2026-MV17823 Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution
Security vulnerability affects the apache-nifi package. Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution...
CLSA-2026-1790623749 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.2.3-tuxcare.1...
CLSA-2026-1789999868 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.1.8-tuxcare.1...
CLSA-2026-1789999145 TuxCare security update for org.springframework.data:spring-data-commons (3 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 3 CVEs. Fixed in 3.2.12-tuxcare.1...
CLSA-2026-1789995986 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.4.13-tuxcare.1...
PT-2026-105276
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.1.8-tuxcare.1...
ROOT-APP-MAVEN-CVE-2026-41716 CVE-2026-41716 in org.springframework.data:spring-data-commons - Patched by Root
Root has patched CVE-2026-41716 in the org.springframework.data:spring-data-commons package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41695 CVE-2026-41695 in org.springframework.data:spring-data-commons - Patched by Root
Root has patched CVE-2026-41695 in the org.springframework.data:spring-data-commons package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1789576613 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.3.12-tuxcare.1...
CLSA-2026-1789225570 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.6...
CLSA-2026-1788420664 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.5...