References https://spring.io/security/cve-2018-1273 https://nvd.nist.gov/vuln/detail/CVE-2018-1273 https://github.com/jas502n/cve-2018-1273 https://blog.csdn.net/wutiangui/article/details/132790803 https://milkfr.github.io/%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/2019/11/17/analysis-spring-data-commons-rce/ https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/framework/Spring-Data-Commons-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2018-1273.md https://www.nsfocus.com.cn/html/2018/39_0412/749.html https://nosec.org/m/share/1606.html https://www.cnblogs.com/cute-puli/p/15338017.html https://chybeta.github.io/2018/04/11/Spring-Data-Commons-Remote-Code-Execution-%E5%88%86%E6%9E%90-%E3%80%90CVE-2018-1273%E3%80%91/
Related VulnerabilitiesSpringBlade /api/blade-log/api/list SQL 注入漏洞SpringBlade /api/blade-user/list SQL 注入漏洞Spring Actuator 未授权访问漏洞PoCspringboot-sbom: Spring Boot Actuator SBOM - ExposurePoCCVE-2025-41242: Spring Framework - Path TraversalPoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges ActuatorPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPentaho /pentaho/j_spring_security_check 默认口令漏洞PoCCVE-2026-22739: Spring Cloud Config Server - Path TraversalPoCspringboot-x-application-context: Spring Boot `X-Application-Context` Header ExposureSpring Framework路径遍历漏洞(CVE-2024-38819)Spring Cloud Gateway SpEL 表达式注入漏洞