GCVE - cpe:2.3:a:spring_batch_admin_project:spring_batch

Approved changes feed: RSS · Atom

cpe:2.3:a:spring_batch_admin_project:spring_batch_admin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Spring Batch Admin Project (`828eb601-5f48-5bd7-a69a-b10b8dd383e0`)
Product	Spring Batch Admin (`6503ca9b-2f85-5c6a-9cff-31ffb1e28a47`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/spring-attic/spring-batch-admin`	purl2cpe	2026-06-01 10:12:58.446000
`pkg:maven/org.springframework.batch/spring-batch-admin-manager`	purl2cpe	2026-06-01 10:12:58.446004
`pkg:maven/org.springframework.batch/spring-batch-admin-resources`	purl2cpe	2026-06-01 10:12:58.446007
`pkg:maven/org.springframework.batch/spring-batch-core`	purl2cpe	2026-06-01 10:12:58.446009

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-12882`	vulnerable	2026-06-08 05:08:47.999733	Details available Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality. Published: 2017-08-18T18:00:00.000Z Updated: 2024-08-05T18:51:06.752Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2017/08/16/5 http://www.securityfocus.com/bid/100410	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12881`	vulnerable	2026-06-08 05:08:47.999308	Details available Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability. Published: 2017-08-18T18:00:00.000Z Updated: 2024-08-05T18:51:07.330Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2017/08/16/5 http://www.securityfocus.com/bid/100410	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.