What is the CVSS score of CVE-2020-5397?

CVE-2020-5397 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 2.4%.

Is there a public PoC exploit available for CVE-2020-5397?

Yes, a public proof-of-concept exploit is available for CVE-2020-5397. Prioritise patching immediately. EPSS: 2.4%.

Is there a patch available for CVE-2020-5397?

Yes, a patch is available for CVE-2020-5397. Update the affected software to the latest version immediately.

Java CVE-2020-5397

MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2020-01-17 security@pivotal.io

Google Java CSRF Spring Framework Application Testing Suite Communications Brm Elastic Charging Engine Communications Diameter Signaling Router Communications Element Manager Communications Policy Management Communications Session Route Manager Enterprise Manager Base Platform Financial Services Regulatory Reporting With Agilereporter Flexcube Private Banking Healthcare Master Person Index Insurance Calculation Engine Insurance Policy Administration J2Ee Insurance Rules Palette Mysql Enterprise Monitor Rapid Planning Retail Assortment Planning Retail Back Office Retail Central Office Retail Financial Integration Retail Integration Bus Retail Order Broker Retail Point Of Service Retail Predictive Application Server Retail Returns Management Retail Service Backbone Weblogic Server

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Jan 17, 2020 - 19:15 nvd

MEDIUM 5.3

DescriptionNVD

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.

AnalysisAI

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack. Affected products include: Vmware Spring Framework, Oracle Application Testing Suite, Oracle Communications Brm - Elastic Charging Engine, Oracle Communications Diameter Signaling Router, Oracle Communications Element Manager. Version information: prior to 5.2.3.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.