Vulnerabilities

TI-2017-09542 CVE-2017-12882 · GHSA-49mj-77q5-qw5g

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows…

LOW 25

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00644 Published 2017-08-18 Fixed in 1.3.0.RELEASE CWE-79

TI-2017-09541 CVE-2017-12881 · GHSA-274r-p6v6-fhh4

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0…

LOW 39

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the fil…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00794 Published 2017-08-18 Fixed in 1.3.0.RELEASE CWE-352

Vulnerabilities

Filters

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows…

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0…