Arbitrary Code Execution

2017-09-2505:55:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

spring-data-rest servers are vulnerable to arbitrary code execution attacks. The attacks exist because it does not check the path before processing PATCH requests to the server, allowing the attackers to submit patch requests with malicious JSON data.

CPENameOperatorVersion
spring data rest - webmvceq3.0.0.RELEASE
spring data rest - webmvcle2.6.8.RELEASE
spring data rest - webmvcle2.5.11.RELEASE
org.springframework.boot:spring-boot-starter-data-restle2.0.0.M5
spring data rest - coreeq3.0.0.RELEASE
spring data rest - corele2.6.8.RELEASE
org.springframework.data:spring-data-rest-webmvcle3.0.0.RC3
spring-boot-starter-data-restle1.5.8.RELEASE
org.springframework.data:spring-data-rest-hal-browserle3.0.0.RC3
org.springframework.data:spring-data-rest-corele3.0.0.RC3

Name	Operator	Version
spring data rest - webmvc	eq	3.0.0.RELEASE
spring data rest - webmvc	le	2.6.8.RELEASE
spring data rest - webmvc	le	2.5.11.RELEASE
org.springframework.boot:spring-boot-starter-data-rest	le	2.0.0.M5
spring data rest - core	eq	3.0.0.RELEASE
spring data rest - core	le	2.6.8.RELEASE
org.springframework.data:spring-data-rest-webmvc	le	3.0.0.RC3
spring-boot-starter-data-rest	le	1.5.8.RELEASE
org.springframework.data:spring-data-rest-hal-browser	le	3.0.0.RC3
org.springframework.data:spring-data-rest-core	le	3.0.0.RC3