Description (CNA)
Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch Admin. This issue has not been patched because Spring Batch Admin has reached end of life.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Spring by Pivotal / Spring Batch Admin | affected All |
CWE
CWE-352
References
ADP enrichment
No English description supplied.