CVE-2011-2732 Improper Control of Generation of Code in Spring Security
Remote attackers can inject HTTP headers and split responses via the logout redirect parameter in Spring Security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2732?
CVE-2011-2732 is a medium-severity vulnerability in n/a, published on 5 Dec 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
Weakness: CWE-94
Which versions are affected by CVE-2011-2732?
4 open source packages ship an affected version, including org.springframework.security:spring-security-core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.springframework.security:spring-security-core Maven | All versions | 2.0.7 |
org.springframework.security:spring-security-core Maven | All versions | 2.0.7 |
org.springframework.security:spring-security-core Maven | From 3.0.0 | 3.0.6 |
org.springframework.security:spring-security-core Maven | From 3.0.0 | 3.0.6 |
Products include Vmware Springsource Spring Security.
How do I fix CVE-2011-2732?
Upgrade org.springframework.security:spring-security-core to a fixed version for your release line: 2.0.7 or 3.0.6.
Is CVE-2011-2732 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-2732 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-5xm9-rf63-wj7h.