Vulnerabilities > Pivotal Software > Spring Data Rest > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-04 CVE-2017-8046 Improper Input Validation vulnerability in multiple products
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.
network
low complexity
vmware pivotal-software CWE-20
7.5