VDB
BDU%3A2019-00563
BDU%3A2019-00563
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость реализации механизма HiddenHttpMethodFilter программной платформы Spring Framework, позволяющая нарушителю осуществить межсайтовую сценарную атаку
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Pivotal Software Inc., АО «Концерн ВНИИНС» | Primavera P6 Enterprise Project Portfolio Management, Spring Framework, Oracle Retail Clearance Optimization Engine, Oracle Retail Markdown Optimization, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Feb 12, 2019 CVE Published
- Nov 21, 2023 CVE Updated
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html url
- http://www.securityfocus.com/bid/107984 url
- https://pivotal.io/security/cve-2018-11039 url
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html url
- https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html url
- https://www.oracle.com/security-alerts/cpujan2020.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url