CVSS 3.0
8.8 highCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2017-12881
High (8.8) in spring batch admin project spring batch admin. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in org.springframework.batch:spring-batch-admin-manager 1.3.0.RELEASE.
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- spring_batch_admin_project:spring_batch_admin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-274r-p6v6-fhh4 | Maven | org.springframework.batch:spring-batch-admin-manager | <1.3.0.RELEASE | 1.3.0.RELEASE |