CVE-2018-1230

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-21 · updated 2026-06-17
Weakness: CWE-352

Description

Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch Admin. This issue has not been patched because Spring Batch Admin has reached end of life.

Affected products

Spring by Pivotal Spring Batch Admin: all versions

References

http://www.securityfocus.com/bid/103463
https://pivotal.io/security/cve-2018-1230
http://www.securityfocus.com/bid/103463
https://pivotal.io/security/cve-2018-1230

Get alerted when CVE-2018-1230 or the next vulnerability affects your stack