CVE-2018-1271

creationtimestamp| type| source ---|---|--- 2025-08-06 13:54:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:24+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

K29042031: Multiple Spring Framework vulnerabilities

Security Advisory Description On April 5th, 2018, three new vulnerabilities were published in the popular Java web framework called Spring. Details on these vulnerabilities and exploit code are not yet available, and mitigation details may change if and when the exploit code is available. You can...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), com.custardsource.parfait:parfait-spring (0.2.0) +130 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.5.6.sec01)

org.springframework:spring-core MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ae.teletronics.nlp:entityextraction =1.3, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1,...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +569 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.16.release)

org.springframework:spring-core MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1113 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.5)

org.springframework:spring-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...

com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0), com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1) +326 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.11.release)

org.springframework:spring-core MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.alibaba.compileflow:compileflow =1.0.0-rc1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +34 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0.4)

org.springframework:spring-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

ch.inftec.ju:ju-dbutil-test-legacy (4.1), ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1) +194 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.1.release)

org.springframework:spring-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.inftec.ju:ju-dbutil-test-legacy 4.1 - ch.ralscha:extdirectspring =1.3.0, =0.4.1, =0.1....

cn.taskflow.jsv:json-schema-validator (>=0.0.1, <=0.1.1), com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4) +92 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.7.release)

org.springframework:spring-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - cn.taskflow.jsv:json-schema-validator =0.0.1, =3.1.6, =3.1.6, =3.1.6, =0.10.0, =1.0,...

org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (1.2.5)

org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +268 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.2.release)

org.springframework:spring-core MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.0, =1.6.0, =2.0.2, =2.0.2, =2.0.2, =2.0.2,...

org.jasig.cas:cas-client (3.0-rc1) potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0-rc2)

org.springframework:spring-core MAVEN version 2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.cas:cas-client 3.0-rc1 Source cves: CVE-2018-1271 Source advisory:...

com.elibom:jogger (>=0.2.0, <=0.2.1), com.github.qiujiayu:autoload-cache (>=1.3, <=4.11) +142 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.10.release)

org.springframework:spring-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.elibom:jogger =0.2.0, =1.3, =4.1, =1.0.0.release, =1.0.0.release, =1.0.2, =1.0.2,...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (>=0.1.1, <=0.1.2) +200 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.0.release)

org.springframework:spring-core MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1, =0.4.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1,...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +84 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.5.6.sec02)

org.springframework:spring-core MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

ca.grimoire:mainspring (>=1.0, <=1.0.4), ch.abertschi.arquillian:arquillian-extension-aspectj (>=0.0.1-alpha1, <=0.0.1-alpha5) +1386 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.5.6)

org.springframework:spring-core MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ca.grimoire:mainspring =1.0, =0.0.1-alpha1, =2.1.0, =1.2.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =1.0....

com.bekk.boss:maven-jetty-pluto-embedded (>=1.0, <=1.0.1), com.google.inject.integration:guice-spring (1.0) +60 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0.2)

org.springframework:spring-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded =1.0, =5.0.0, =8.5.1.1, =8.5.1.1, =1.0.2, =1.1.1, =1.1.0...

at.molindo.social:spring-social-security (1.1.0.release), cc.fozone.validation:fo-validation (>=0.9.0.release, <=0.9.1.release) +489 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.8.release)

org.springframework:spring-core MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release - cc.fozone.validation:fo-validati...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +212 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (3.2.6.release)

org.springframework:spring-core MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...