CVE-2018-1199 describes a security bypass vulnerability in Spring Security (versions 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1) and Spring Framework (versions 4.3.x before 4.3.14 and 5.0.x before 5.0.3), impacting products from vendors like Oracle, Red Hat, and VMware. An attacker can bypass security constraints by manipulating URL path parameters with special encodings, exploiting inconsistencies in how Servlet containers handle getPathInfo(). This vulnerability has a CVSS score of 5.3 (Medium), indicating a network-based attack with low complexity and no user interaction required, potentially leading to information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.3.0, < 4.3.14CPE matchmatch criteria | cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* | ||
>= 5.0.0, < 5.0.3CPE matchmatch criteria | cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:* | ||
>= 4.1.0, < 4.1.5CPE matchmatch criteria | cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* | ||
>= 4.2.0, < 4.2.4CPE matchmatch criteria | cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* | ||
>= 5.0.0, < 5.0.1CPE matchmatch criteria | cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Oct 17, 2018spring-framework: Improper URL path validation allows for bypassing of security checks on static resources
Jan 29, 2018