CVE-2016-4977

2017-05-2517:29:00

Google

osv.dev

7.7 High

AI Score

Confidence

Low

0.046 Low

EPSS

Percentile

92.6%

JSON

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.

CPENameOperatorVersion
spring-security-oautheq1.0.0.M5
spring-security-oautheq2.0.1.RELEASE
spring-security-oautheq1.0.0.RC2
spring-security-oautheq2.0.0.RC1
spring-security-oautheq2.0.0.M2
spring-security-oautheq1.0.0.M6b
spring-security-oautheq1.0.3.RELEASE
spring-security-oautheq2.0.0.M4
spring-security-oautheq1.0.0.RC1
spring-security-oautheqjwt1.0.1.RELEASE

Name	Operator	Version
spring-security-oauth	eq	1.0.0.M5
spring-security-oauth	eq	2.0.1.RELEASE
spring-security-oauth	eq	1.0.0.RC2
spring-security-oauth	eq	2.0.0.RC1
spring-security-oauth	eq	2.0.0.M2
spring-security-oauth	eq	1.0.0.M6b
spring-security-oauth	eq	1.0.3.RELEASE
spring-security-oauth	eq	2.0.0.M4
spring-security-oauth	eq	1.0.0.RC1
spring-security-oauth	eq	jwt1.0.1.RELEASE