VDB
BDU%3A2022-06726
BDU%3A2022-06726
PUBLISHED
CVSS 10 CRITICAL
Уязвимость класса SimpleEvaluationContext платформы управления данными Spring Data Commons и фреймворка для создания веб-сервисов Spring Data REST, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pivotal Software Inc., Oracle Corp., Apache Software Foundation | Spring Data Commons, Spring Data REST, Oracle Financial Services Crime and Compliance Management Studio, Ignite |
Timeline
- Nov 14, 2022 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://pivotal.io/security/cve-2018-1273 url
- http://mail-archives.apache.org/mod_mbox/ignite-dev/201807.mbox/%3CCAK0qHnqzfzmCDFFi6c5Jok19zNkVCz5Xb4sU%3D0f2J_1i4p46zQ%40mail.gmail.com%3E url
- https://jira.spring.io/browse/DATACMNS-1282 url
- https://docs.spring.io/spring-data/jpa/docs/current/reference/html/#core.web.binding url
- https://nvd.nist.gov/vuln/detail/CVE-2018-1273 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432a advisory
- https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b653 advisory
- https://www.oracle.com/security-alerts/cpujul2022.html advisory
- https://lists.apache.org/thread/p12xtkr39tno5m7oo0px441mz74kbcs5 advisory