6 matches found
am.ik.blog:blog-domain (>=4.0.2, <=4.3.6), am.ik.blog:blog-mapper (>=4.0.0, <=4.5.0) +3500 more potentially affected by CVE-2018-1196 via org.springframework.boot:spring-boot (>=1.5.0.release, <=1.5.9.release)
org.springframework.boot:spring-boot MAVEN version =1.5.0.release, =4.0.2, =4.0.0, =1.3.0, =0.0.1, =0.2.0, =1.0.3, =1.0.0, =1.0.2, =1.0.0, =1.1.0 and more Source cves: CVE-2018-1196 Source advisory: GHSA-XX65-CC7G-9PFP...
am.ik.blog:blog-domain (>=4.0.2, <=4.3.6), am.ik.blog:blog-mapper (>=4.0.0, <=4.5.0) +3500 more potentially affected by CVE-2018-1196 via org.springframework.boot:spring-boot (>=1.5.0.release, <=1.5.9.release)
org.springframework.boot:spring-boot MAVEN version =1.5.0.release, =4.0.2, =4.0.0, =1.3.0, =0.0.1, =0.2.0, =1.0.3, =1.0.0, =1.0.2, =1.0.0, =1.1.0 and more Source cves: CVE-2018-1196 Source advisory: OSV:GHSA-XX65-CC7G-9PFP...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...
CVE-2018-1196
The CVE-2018-1196 issue affects Spring Boot when using the embedded launch script to run as a systemd/init.d service. The root cause is a symlink attack on the run_user, enabling overwriting/taking ownership of files on the same system if the app is installed as a service and the run_user has she...
CVE-2018-1196
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...