spring batch admin project spring batch admin vulnerabilities

Latest spring batch admin project spring batch admin CVEs

Newest publication first

1. CVE-2017-12882 Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

   Published 2017-08-18

   Medium·CVSS 5.4

   Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

2. CVE-2017-12881 Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality

   Published 2017-08-18

   High·CVSS 8.8

   Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.