NetSight
IP …
high8.8

CVE-2016-4977

Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views

Impact

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.springframework.security.oauth:spring-security-oauth2>= 2.0.0, < 2.0.102.0.10

Affected products

VendorProductAffected versions
PivotalSpring Security Oauth
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

Weakness classification

CWE-19

References