Spring Framework Cross-site Scripting via JSP Form Tags
Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting (XSS) vulnerability.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-79 | CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) |
Type: CWE
Description: CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 5.9 | MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N |
Version: 3.1
Base score: 5.9
Base severity: MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Impacts
| CAPEC ID | Description |
|---|
| N/A | Spring MVC applications that accept user-supplied values in JSP form tag CSS attributes allow arbitrary HTML and JavaScript code injection, potentially resulting in a cross-site scripting vulnerability. |
CAPEC ID: N/A
Description: Spring MVC applications that accept user-supplied values in JSP form tag CSS attributes allow arbitrary HTML and JavaScript code injection, potentially resulting in a cross-site scripting vulnerability.