CVE-2018-1272

score

<0.1

cvss

7.5

epss

3.1%

published

2018-04-06

kev added

—

first seen

2026-10-21

Spring Framework prior to 5.0.5 and 4.3.15 contains a multipart request handling vulnerability caused by insufficient validation of client input, letting attackers insert extra multipart data, which may lead to privilege escalation when used in server-to-server requests, exploit requires malicious multipart input from client.