CVE-2018-1270

9.8 criticalEPSS 77%

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.

CVSS 3.1: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 77% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)
CWEs: CWE-94, CWE-358
Published: 2018-04-06
Modified: 2026-10-08
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
oracle:application_testing_suite
oracle:big_data_discovery
oracle:communications_converged_application_server
oracle:communications_diameter_signaling_router
oracle:communications_performance_intelligence_center
oracle:communications_services_gatekeeper
oracle:enterprise_manager_ops_center
oracle:goldengate_for_big_data
oracle:health_sciences_information_manager
oracle:healthcare_master_person_index
oracle:insurance_calculation_engine
oracle:insurance_rules_palette
oracle:primavera_gateway
oracle:retail_back_office
oracle:retail_central_office
oracle:retail_customer_insights
oracle:retail_integration_bus
oracle:retail_open_commerce_platform
oracle:retail_order_broker
oracle:retail_point-of-sale
oracle:retail_predictive_application_server
oracle:retail_returns_management
oracle:retail_xstore_point_of_service
oracle:service_architecture_leveraging_tuxedo
oracle:tape_library_acsls
redhat:fuse
vmware:spring_framework

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-p5hg-3xm3-gcjg	Maven	org.springframework:spring-messaging	>=5.0.0.RELEASE <5.0.5.RELEASE	5.0.5.RELEASE
GHSA-p5hg-3xm3-gcjg	Maven	org.springframework:spring-messaging	<4.3.16.RELEASE	4.3.16.RELEASE

References

Check your stack JSON