https://bugzilla.redhat.com/show_bug.cgi?id=1564408
Happy Mia <hoanhoan9595(a)gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |anemec(a)redhat.com,
| |hoanhoan9595(a)gmail.com
Flags| |needinfo?(anemec(a)redhat.com
| |)
--- Comment #4 from Happy Mia <hoanhoan9595(a)gmail.com> ---
(In reply to Andrej Nemec from comment #0)
Spring Framework provides client-side support for multipart requests.
When
Spring MVC or Spring WebFlux server application (server A) receives input
from a remote client, and then uses that input to make a multipart request
to another server (server B), it can be exposed to an attack, where an extra
multipart is inserted in the content of the request from server A, causing
server B to use the wrong value for a part it expects. This could to lead
privilege escalation, for example, if the part content represents a username
or user roles.
In order for the attacker to succeed, they would have to be able to guess
the multipart boundary value chosen by server A for the multipart request to
server B, which requires the attacker to also have control of the server or
the ability to see the HTTP log of server A through a separate attack vector.
External References:
https://pivotal.io/security/cve-2018-1272
I want to reproduce the CVE-2018-1272 vulnerability in my project.
Please explain me how to attack this vulnerability. Thanks!
--
You are receiving this mail because:
You are on the CC list for the bug.