CVE-2018-1229

State: Published
Severity: Not scored
Published: Mar 21, 2018
Updated: Sep 17, 2024
Reserved: Dec 6, 2017

Description

Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because Spring Batch Admin has reached end of life.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Cross-site Scripting (XSS) - Stored

Affected Products

Product	Versions
Spring Batch AdminSpring by Pivotal	AllAffected

References

103462vdb-entry
https://pivotal.io/security/cve-2018-1229

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.