9.8crit
CVE-2018-1260in critical feed
Spring Security OAuth vulnerable to remote code execution (RCE)
Also known as GHSA-rrpm-pj7p-7j9q
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.6%
percentile 96%
Public exploits
0
none known
Summary
Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint that can lead to remote code execution when the resource owner is forwarded to the approval endpoint.
Exploit prediction (EPSS)
10.62% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| GitHub | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.springframework.security.oauth:spring-security-oauth2 | >=2.3.0, <2.3.3 >=2.2.0, <2.2.2 >=2.1.0, <2.1.2 >=2.0.0, <2.0.15 >=1.0.0, <=1.0.5 | 2.3.3 2.2.2 2.1.2 2.0.15 |
Affected products
- Pivotal Spring Security OAuth
Classification
- Weakness
- CWE-94 Improper Control of Generation of Code
- Technology feeds
- Spring (RSS, critical only)
References
- access.redhat.com /errata/RHSA-2018:1809 · vendor-advisory, x_refsource_REDHAT, x_transferred
- pivotal.io /security/cve-2018-1260 · x_refsource_CONFIRM, x_transferred
- access.redhat.com /errata/RHSA-2018:2939 · vendor-advisory, x_refsource_REDHAT, x_transferred
- securityfocus.com /bid/104158 · vdb-entry, x_refsource_BID, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2018-1260 · advisory
- github.com /advisories/GHSA-rrpm-pj7p-7j9q · advisory
- github.com /spring-attic/spring-security-oauth · package
- web.archive.org /web/20200227123539/http://www.securityfocus.com/bid/104158 · web
Sources
- CVE List: CVE-2018-1260
- GitHub Advisory: GHSA-rrpm-pj7p-7j9q
- NVD: CVE-2018-1260
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.