CVE-2016-4977
High · 8.8CVSS
8.8
EPSS
79.2%
Published
May 25, 2017
CISA due date
—
The record
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.springframework.security.oauth:spring-security-oauth2 | 1.0.0 | 1.0.5 |
| Maven | org.springframework.security.oauth:spring-security-oauth2 | 2.0.0 | 2.0.10 |
| maven | org.springframework.security.oauth/spring-security-oauth2 | 2.0.0 | No fix |
Related vulnerabilities
- CVE-2019-12828 An issue was discovered in Electronic Arts Origin before 10.5.39. CWE-19
- CVE-2019-0946 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0947 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0945 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0801 A remote code execution vulnerability exists when Microsoft Office fails to properly… CWE-19
- CVE-2019-0630 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2019-0633 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… CWE-19