CVE-2018-1230

State: Published
Severity: Not scored
Published: Mar 21, 2018
Updated: Sep 16, 2024
Reserved: Dec 6, 2017

Description

Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch Admin. This issue has not been patched because Spring Batch Admin has reached end of life.

Scores

The record has no CVSS score.

Weaknesses

CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

Product	Versions
Spring Batch AdminSpring by Pivotal	AllAffected

References

https://pivotal.io/security/cve-2018-1230
103463vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.