XSS in NetApp Data Availability Services
CVE-2020-5398
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.888 (99.8th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.884 · newest: 0.888 · change: +0.004
Affected products
- NetApp Data Availability Services
- NetApp Snapcenter
- Oracle Application Testing Suite — versions 13.3.0.1
- Oracle Communications Billing And Revenue Management Elastic Charging Engine — versions 11.3, 12.0
- Oracle Communications Cloud Native Core Policy — versions 1.5.0
- Oracle Communications Diameter Signaling Router
- Oracle Communications Element Manager — versions 8.1.1, 8.2.0, 8.2.1
- Oracle Communications Policy Management — versions 12.5.0
- Oracle Communications Session Report Manager — versions 8.1.1, 8.2.0, 8.2.1
- Oracle Communications Session Route Manager — versions 8.1.1, 8.2.0, 8.2.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- lists.apache.org/thread.html/rf8dc72b974ee74f17bce661ea7d124e733a1f4c4f236354ac… (mailing-list)
- lists.apache.org/thread.html/rc05acaacad089613e9642f939b3a44f7199b5537493945c3e… (mailing-list)
- lists.apache.org/thread.html/rdcaadaa9a68b31b7d093d76eacfaacf6c7a819f976b595c75… (mailing-list)
- lists.apache.org/thread.html/r7361bfe84bde9d233f9800c3a96673e7bd81207549ced0236… (mailing-list)
- lists.apache.org/thread.html/r9fb1ee08cf337d16c3364feb0f35a072438c1a956afd7b778… (mailing-list)
- lists.apache.org/thread.html/r0f3530f7cb510036e497532ffc4e0bd0b882940448cf4e233… (mailing-list)
- lists.apache.org/thread.html/r8736185eb921022225a83e56d7285a217fd83f5524bd64a6c… (mailing-list)
- lists.apache.org/thread.html/r7d5e518088e2e778928b02bcd3be3b948b59acefe2f0ebb57… (mailing-list)
- lists.apache.org/thread.html/r3765353ff434fd00d8fa5a44734b3625a06eeb2a3fb468da7… (mailing-list)
- lists.apache.org/thread.html/rab0de39839b4c208dcd73f01e12899dc453361935a816a784… (mailing-list)
Frequently asked questions
- What is CVE-2020-5398?
- CVE-2020-5398 is a high-severity vulnerability in NetApp Data Availability Services, classified under Cross-site Scripting. CVSS score: 7.5/10. Published 2020-01-17.
- How severe is CVE-2020-5398?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2020-5398 known to be exploited?
- 44 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.