CVE Feed

    Dashboard / CVE / CVE-2018-1274

    CVE-2018-1274

    Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests against Spring Data REST endpoints or endpoints using property path parsing which can cause a denial of service (CPU and memory consumption).

    Published:Apr 4, 2018
    Last Modified:Jun 15, 2026
    EPS:Apr 18, 2018
    EPSS Score:0.01969
    CVSS Score:7.5

    Affected Products

    Vendor
    Broadcom
    Product
    Spring Data Commons
    Vendor
    Pivotal Software
    Product
    Spring Data Rest

    Exploits

    https://github.com/dawetmaster/CVE-2018-1274-spring-data-commons-vulnerable

    Related CVEs

    CVE-2026-41721 (CVSS 5.9) — Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Da…
    CVE-2026-41716 (CVSS 7.5) — Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cach…
    CVE-2026-41711 (CVSS 5.9) — Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a Stac…
    CVE-2026-41695 (CVSS 7.5) — Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attac…
    CVE-2018-1259 (CVSS 7.5) — Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1…
    CVE-2018-1273 (CVSS 9.8) — Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High