gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8), org.springframework.xd:spring-xd-rest-client (>=1.0.3.release, <=1.0.4.release) +2 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.0.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: -...

com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), org.springframework.cloud.dist:spring-cloud-dataflow-server-yarn-dist (1.0.0.release) +21 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.1.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =1.3.1.release,...

CVE-2018-1229

The CVE-2018-1229 entry affects Pivotal Spring Batch Admin (all versions). It describes a stored cross-site scripting (XSS) vulnerability in the file upload feature that could allow an unauthenticated attacker with network access to store a script executed by other users. The issue is not patched...