CVE-2016-4977
HIGH 8.8EPSS 79.2%
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.
- CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 79.18% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- high · CWE-19
- Published
- 2017-05-25
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
- N0b1e6/CVE-2016-4977-POC0★ · 2020-02-17
Nuclei templates (1)
Vulhub environments (1)
Exploit collections (2)
- chaitin/xray/blob/master/pocs/spring-cve-2016-4977.yml
- zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2016/CVE-2016-4977.yaml