CVE-2018-1256
1 advisory.
Maven/io.pivotal.spring.cloud:spring-cloud-sso-connector CVE-2018-1256: high 8.1
Issuer validation regression in Spring Cloud SSO Connector
Action: Upgrade io.pivotal.spring.cloud:spring-cloud-sso-connector to 2.1.3.RELEASE or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.2.RELEASE | 2.1.3.RELEASE | - |
Fixed versions
| 2.1.3.RELEASE |
Sources
- osv: GHSA-q4q2-93pw-qwgf
- https://nvd.nist.gov/vuln/detail/CVE-2018-1256
- https://github.com/pivotal-cf/spring-cloud-sso-connector/commit/ef647a2acf2363c6018e8543d665ac8862593372
- https://pivotal.io/security/cve-2018-1256
CVE-2018-1256 · published · modified · JSON