#VU11918 HTTP response splitting in Pivotal Spring Data Commons - CVE-2018-1273

Vulnerability identifier: #VU11918

Vulnerability risk: High

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2018-1273

CWE-ID: CWE-113

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Pivotal Spring Data Commons
Server applications / Frameworks for developing and running applications

Vendor: Pivotal

Description
The vulnerability allows a remote unauthenticated attacker to execute arbitrary code on the target system.

The weakness exists due to improper neutralization of special elements. A remote attacker can supply specially crafted request parameters against Spring Data REST backed HTTP resources or use Spring Data's projection-based request payload binding hat and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation
Update to versions 1.13.10 or 2.0.5.

Vulnerable software versions

Pivotal Spring Data Commons: 1.13 - 2.0.4

---

External links
https://pivotal.io/security/cve-2018-1273

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.