CVE-2020-5397

Description

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.889

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are affected in Oracle WebLogic Server 12.2.1.3.0	Windows
Multiple vulnerabilities are affected in Oracle WebLogic Server 12.2.1.4.0	Windows
Vulnerabilities CVE-2020-5397 are fixed in Spring-webmvc 5.2.3	Windows
Vulnerabilities CVE-2020-5397 are fixed in Spring-webflux 5.2.3	Windows
Vulnerabilities CVE-2020-5397 are fixed in Spring-webmvc for Linux 5.2.3	Linux
Vulnerabilities CVE-2020-5397 are fixed in Spring-webflux for Linux 5.2.3	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234