Spring Framework allows applications to expose STOMP over WebSocket endpoints

2018-10-1720:05:59

Google

osv.dev

224

0.793 High

EPSS

Percentile

98.3%

JSON

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.

CPENameOperatorVersion
org.springframework:spring-coreeq2.5.3
org.springframework:spring-coreeq1.1.1
org.springframework:spring-coreeq2.0-m2
org.springframework:spring-coreeq2.0
org.springframework:spring-coreeq4.3.4.RELEASE
org.springframework:spring-coreeq2.5.6
org.springframework:spring-coreeq2.5.6.SEC02
org.springframework:spring-coreeq1.2-rc1
org.springframework:spring-coreeq3.1.4.RELEASE
org.springframework:spring-coreeq1.1.2

Name	Operator	Version
org.springframework:spring-core	eq	2.5.3
org.springframework:spring-core	eq	1.1.1
org.springframework:spring-core	eq	2.0-m2
org.springframework:spring-core	eq	2.0
org.springframework:spring-core	eq	4.3.4.RELEASE
org.springframework:spring-core	eq	2.5.6
org.springframework:spring-core	eq	2.5.6.SEC02
org.springframework:spring-core	eq	1.2-rc1
org.springframework:spring-core	eq	3.1.4.RELEASE
org.springframework:spring-core	eq	1.1.2