CVE-2018-11039: XSS
Pivotal Spring Framework is vulnerable to cross-site tracing, caused by a flaw in the HiddenHttpMethodFilter in Spring MVC. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to cause the victim's browser to invoke a TRACE request to return sensitive header information including cookies or authentication data from third-party domains.
Other sources
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11039?
CVE-2018-11039 is classified as a critical vulnerability due to its potential to exploit cross-site tracing in vulnerable applications.
How do I fix CVE-2018-11039?
To remediate CVE-2018-11039, update to Spring Framework version 4.3.18 or 5.0.7 or later.
What systems are affected by CVE-2018-11039?
CVE-2018-11039 impacts various versions of the Spring Framework, IBM GDE, several Oracle products, and other software relying on vulnerable Spring MVC components.
What attack vector is associated with CVE-2018-11039?
CVE-2018-11039 can be exploited by persuading a user to visit a specially crafted website which triggers a TRACE request in their browser.
Is CVE-2018-11039 a client-side or server-side vulnerability?
CVE-2018-11039 is primarily a server-side vulnerability that allows attackers to perform cross-site tracing, potentially leading to sensitive data exposure.