CVE-2018-1275: Code Injection
CVE-2018-1270, which permitted a malicious user to craft a STOMP message that could lead to remote code execution, was not fully addressed in the 4.3.x branch of the Spring Framework.
Other sources
Pivotal Spring Framework could allow a remote attacker to execute arbitrary code on the system, caused by the exposure of STOMP over WebSocket endpoints with a STOMP broker through the spring-messaging module. By sending a specially-crafted message, an attacker could exploit this vulnerability to execute arbitrary code on the system.
— IBM
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2018-1275?
CVE-2018-1275 is a vulnerability in the Pivotal Spring Framework that could allow a remote attacker to execute arbitrary code on the system.
How severe is CVE-2018-1275?
CVE-2018-1275 has a severity rating of 9.8 (critical).
Which versions of Spring Framework are affected by CVE-2018-1275?
Spring Framework versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16, as well as older unsupported versions, are affected by CVE-2018-1275.
How can I fix CVE-2018-1275?
To fix CVE-2018-1275, update your Spring Framework installation to version 5.0.5 or later if you are using version 5.x, or to version 4.3.16 or later if you are using version 4.3.
Where can I find more information about CVE-2018-1275?
You can find more information about CVE-2018-1275 on the Red Hat security advisory page (RHSA-2018:1320) and the GitHub commit page.