VULNERABILITY INTELLIGENCE

CVE-2017-12881

CVSS score8.8 HIGH

EPSS probability0.79%

CISA KEVNot currently listed

Published2017-08-18

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

Weakness classification

nvd@nist.gov: CWE-352

Primary references

cve@mitre.org — Mailing List, Third Party Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry