[Bug 1591929] New: CVE-2018-11039 springframework: Cross Site Tracing (XST ) if vulnerable to XSS
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591929
Bug ID: 1591929
Summary: CVE-2018-11039 springframework: Cross Site Tracing
(XST) if vulnerable to XSS
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to
4.3.18, and older unsupported versions) allow web applications to change the
HTTP request method to any HTTP method (including TRACE) using the
HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS
vulnerability, a malicious user (or attacker) can use this filter to escalate
to an XST (Cross Site Tracing) attack.
References:
https://pivotal.io/security/cve-2018-11039
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591931] New: CVE-2018-11040 springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591931
Bug ID: 1591931
Summary: CVE-2018-11040 springframework: cross-domain requests
via JSONP through AbstractJsonpResponseBodyAdvice
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Spring Framework, versions 5.0.x prior to 5.0.7, versions 4.3.x prior to
4.3.18, and older unsupported versions, allows web applications to enable
cross-domain requests via JSONP (JSON with Padding) through
AbstractJsonpResponseBodyAdvice for REST controllers, and
MappingJackson2JsonView for browser requests. Both are not enabled by default
in Spring Framework nor Spring Boot. However when MappingJackson2JsonView is
configured in an application, JSONP support is automatically ready to use
through the "jsonp" and "callback" JSONP parameters, enabling cross-domain
requests.
References:
https://pivotal.io/security/cve-2018-11040
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1393454] New: CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1393454
Bug ID: 1393454
Summary: CVE-2016-1000031 Apache Commons FileUpload:
DiskFileItem file manipulation
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
aszczucz(a)redhat.com, bdawidow(a)redhat.com,
chazlett(a)redhat.com, csutherl(a)redhat.com,
dmcphers(a)redhat.com, epp-bugs(a)redhat.com,
etirelli(a)redhat.com, felias(a)redhat.com,
gvarsami(a)redhat.com, hchiorea(a)redhat.com,
hfnukal(a)redhat.com, hhorak(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jerboaa(a)gmail.com,
jialiu(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jorton(a)redhat.com,
jpallich(a)redhat.com, jshepherd(a)redhat.com,
kconner(a)redhat.com, krzysztof.daniel(a)gmail.com,
kseifried(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lmeyer(a)redhat.com,
lpetrovi(a)redhat.com, mbaluch(a)redhat.com,
me(a)coolsvap.net, miburman(a)redhat.com,
mizdebsk(a)redhat.com, mmccomas(a)redhat.com,
mmraka(a)redhat.com, msimacek(a)redhat.com,
mweiler(a)redhat.com, mwinkler(a)redhat.com,
nwallace(a)redhat.com, omajid(a)redhat.com,
pavelp(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
sgehwolf(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com,
SpikeFedora(a)gmail.com, spinder(a)redhat.com,
tcunning(a)redhat.com, theute(a)redhat.com,
tiwillia(a)redhat.com, tkirby(a)redhat.com,
trick(a)vanstaveren.us, vhalbert(a)redhat.com
There exists a Java Object in the Apache Commons FileUpload library that can be
manipulated in such a way that when it is deserialized, it can write or copy
files to disk in arbitrary locations. Furthermore, while the Object can be used
alone, this new vector can be integrated with ysoserial to upload and execute
binaries in a single deserialization call. This may or may not work depending
on an application's implementation of the FileUpload library.
External References:
http://www.tenable.com/security/research/tra-2016-12
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1591933] New: CVE-2018-11040 springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice [ fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591933
Bug ID: 1591933
Summary: CVE-2018-11040 springframework: cross-domain requests
via JSONP through AbstractJsonpResponseBodyAdvice
[fedora-all]
Product: Fedora
Version: 28
Component: springframework
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: puntogil(a)libero.it
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 6 months
[Bug 1591930] New: CVE-2018-11039 springframework: Cross Site Tracing (XST ) if vulnerable to XSS [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1591930
Bug ID: 1591930
Summary: CVE-2018-11039 springframework: Cross Site Tracing
(XST) if vulnerable to XSS [fedora-all]
Product: Fedora
Version: 28
Component: springframework
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: puntogil(a)libero.it
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dchen(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 6 months
[Bug 1640615] New: CVE-2018-3258 mysql-connector-java: Connector/ J unspecified vulnerability (CPU October 2018)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1640615
Bug ID: 1640615
Summary: CVE-2018-3258 mysql-connector-java: Connector/J
unspecified vulnerability (CPU October 2018)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: aileenc(a)redhat.com, bbuckingham(a)redhat.com,
bcourt(a)redhat.com, bkearney(a)redhat.com,
cbyrne(a)redhat.com, chazlett(a)redhat.com,
cmacedo(a)redhat.com, databases-maint(a)redhat.com,
dffrench(a)redhat.com, drieden(a)redhat.com,
drusso(a)redhat.com, gvarsami(a)redhat.com,
hghasemb(a)redhat.com, hhorak(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jmadigan(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
ldimaggi(a)redhat.com, lgriffin(a)redhat.com,
mmccune(a)redhat.com, mmuzila(a)redhat.com,
mrike(a)redhat.com, mschorm(a)redhat.com,
ngough(a)redhat.com, nwallace(a)redhat.com,
ohadlevy(a)redhat.com, pdrozd(a)redhat.com,
ppenicka(a)redhat.com, puntogil(a)libero.it,
pwright(a)redhat.com, rchan(a)redhat.com,
rjerrido(a)redhat.com, rwagner(a)redhat.com,
steve.traylen(a)cern.ch, sthorger(a)redhat.com,
tcunning(a)redhat.com, tjay(a)redhat.com,
tkirby(a)redhat.com, trepel(a)redhat.com,
xjakub(a)fi.muni.cz
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent:
Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily
exploitable vulnerability allows low privileged attacker with network access
via multiple protocols to compromise MySQL Connectors. Successful attacks of
this vulnerability can result in takeover of MySQL Connectors.
References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3258
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.ht...
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 6 months