Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-8308

CVE-2017-8046 spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: fuse-7.0
    • Component/s: FIS-Spring Boot
    • Labels:
      None
    • Epic Link:
    • Security Sensitive Issue:
      This issue is security relevant

      Description

      Update version of Spring Data REST in FIS BOM to make sure we pull a version that includes a fix for
      https://nvd.nist.gov/vuln/detail/CVE-2017-8046, https://pivotal.io/security/cve-2017-8046

        Gliffy Diagrams

          Attachments

            Issue Links

            cloned to

            Bug - A problem which impairs or prevents the functions of the product. ENTESB-8754 CVE-2017-8046 spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code

            • Blocker - An issue (bug, feature, task) that blocks development and/or testing work, production could not run. An upcoming version that is affected by this issue cannot be released until it's addressed.
            • Closed
            is related to

            Bug - A problem which impairs or prevents the functions of the product. ENTESB-8649 CVE-2017-8046 spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code

            • Major - A request that should be considered seriously but is not a show stopper.
            • Closed

              Activity

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  kcbabo Keith Babo
                  Tester:
                  Lukas Lowinger
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  10 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: