CVE Feed

    Dashboard / CVE / CVE-2018-1273

    CVE-2018-1273

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

    Published:Mar 27, 2018
    Last Modified:Jun 15, 2026
    EPS:Apr 11, 2018
    EPSS Score:0.95649
    CVSS Score:9.8

    CISA Notification

    Description

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Apr 15, 2022
    1610 days ago
    Alert Date
    Mar 25, 2022
    1631 days ago

    Affected Products

    Vendor
    Apache
    Product
    Ignite
    Vendor
    Broadcom
    Product
    Spring Data Commons
    Vendor
    Oracle
    Product
    Financial Services Crime And Compliance Management Studio
    Vendor
    Pivotal Software
    Product
    Spring Data Rest

    Exploits

    https://github.com/cved-sources/cve-2018-1273https://github.com/dawetmaster/CVE-2018-1273-spring-data-commons-vulnerablehttps://github.com/hdgokani/CVE-2018-1273https://github.com/jas502n/cve-2018-1273https://github.com/knqyf263/CVE-2018-1273https://github.com/wearearima/poc-cve-2018-1273https://github.com/webr0ck/poc-cve-2018-1273

    Related CVEs

    CVE-2025-48977 (CVSS 8.5) — Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any fi…
    CVE-2024-52577 (CVSS 9.5) — In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for…
    CVE-2021-28163 (CVSS 2.7) — In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapp…
    CVE-2020-1963 (CVSS 9.1) — Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which coul…
    CVE-2018-8018 (CVSS 9.8) — In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of clas…
    CVE-2018-1295 (CVSS 9.8) — In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for seria…
    CVE-2017-7686 (CVSS 7.5) — Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project release…
    CVE-2016-6805 (CVSS 5.9) — Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High