Pivotal Spring Batch Admin CVE-2018-1229 HTML Injection Vulnerability

Bugtraq ID:	103462
Class:	Input Validation Error
CVE:	CVE-2018-1229
Remote:	Yes
Local:	No
Published:	Mar 16 2018 12:00AM
Updated:	Mar 16 2018 12:00AM
Credit:	Wen Bin Kong
Vulnerable:	Pivotal Spring Batch Admin 1.3.1.RELEASE Pivotal Spring Batch Admin 1.3.0.RELEASE Pivotal Spring Batch Admin 1.3.0.RC1 Pivotal Spring Batch Admin 1.3.0.M1 Pivotal Spring Batch Admin 1.2.1.RELEASE Pivotal Spring Batch Admin 1.2.0.RELEASE Pivotal Spring Batch Admin 1.2.0.RC1 Pivotal Spring Batch Admin 1.2.0.M1 Pivotal Spring Batch Admin 1.0.0.RELEASE Pivotal Spring Batch Admin 1.0.0.RC1 Pivotal Spring Batch Admin 1.0.0.M3 Pivotal Spring Batch Admin 1.0.0.M2 Pivotal Spring Batch Admin 1.0.0.M1
Not Vulnerable:

Pivotal Spring Batch Admin CVE-2018-1229 HTML Injection Vulnerability

Pivotal Spring Batch Admin is prone to a HTML-injection vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Pivotal Spring Batch Admin CVE-2018-1229 HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]