CVE-2018-1229 | BDVDB-2026-98143 Detail

Spring by PivotalSpring Batch Admin

Description#

Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because Spring Batch Admin has reached end of life.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

http://www.securityfocus.com/bid/103462
https://pivotal.io/security/cve-2018-1229

Exploit#

No public exploit known

History#

Version 12018-03-21Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.