| ID | CVE-2018-1257 | ||||||
| Sažetak | Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:L/Au:S/C:N/I:N/A:P | ||||||
| Zadnje važnije ažuriranje | 23-06-2022 - 16:31 | ||||||
| Objavljeno | 11-05-2018 - 20:29 |
