Overview
About vulnerability
Spring Web Flow’s JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not “text/html”, which can result in a scripting attack in the user’s browser if the error response from the server contains error details with input reflected from an attacker.
Pre-conditions:
- The application uses the “org.springframework.webflow:spring-js-resources” artifact.
- Spring-Dojo.js loaded and used for Ajax requests.
Details
- Affected product:
- Spring
- Affected packages:
- Spring Web Flow @ 2.3.1.RELEASE (+9 more)