Spring Batch Admin (Spring Batch Admin Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2017-08-18. Vendor: Spring Batch Admin Project.

CVEs of Spring Batch Admin

• CVE-2017-12882 - CVSS 5.4 (medium), 2017-08-18: Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML…
• CVE-2017-12881 - CVSS 8.8 (high), 2017-08-18: Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified…