CVE-2017-12882

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-08-18

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Spring Batch Admin (Spring Batch Admin Project)

References

• http://www.openwall.com/lists/oss-security/2017/08/16/5
• http://www.securityfocus.com/bid/100410