Maven/org.springframework.security:spring-security-core CVE-2018-1199: medium 5.3, EPSS 2.92%
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Action: Upgrade org.springframework.security:spring-security-core to 4.1.5 (4.1.x), 4.2.4 (4.2.x) or 5.0.1 (5.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.2.4 | - |
| 5.0.0 | 5.0.1 | - |
| 4.1.0 | 4.1.5 | - |
Fixed versions
| 4.2.4 | 5.0.1 | 4.1.5 |
Sources
- osv: GHSA-v596-fwhq-8x48
- https://nvd.nist.gov/vuln/detail/CVE-2018-1199
- https://github.com/spring-projects/spring-framework/commit/554662ebab87af97ba25d0c9f5449c7acda8df9c
- https://github.com/spring-projects/spring-framework/commit/73a81f98d40eb6f5faa91aceb868db53fae2a94b
- https://github.com/spring-projects/spring-framework/commit/e6e6b8f4adcad99d133de97fcfac5ae5dd14153c
- https://github.com/spring-projects/spring-security/commit/0eef5b4b425ab42b9fa0fde1a3f36a37b92558f
- https://github.com/spring-projects/spring-security/commit/65da28e4bf62f58fb130ba727cbbd621b44a36d
- https://github.com/spring-projects/spring-security/commit/cb8041ba67635edafcc934498ef82707157fd22
- https://access.redhat.com/errata/RHSA-2018:2405
- https://github.com/advisories/GHSA-v596-fwhq-8x48
- https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe@%3Cissues.activemq.apache.org%3E
- https://lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c@%3Cissues.activemq.apache.org%3E
- https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369@%3Cissues.activemq.apache.org%3E
- https://pivotal.io/security/cve-2018-1199
- https://www.oracle.com/security-alerts/cpujul2020.html
CVE-2018-1199 · published · modified · JSON