CVE-2018-1273

KEV · ransomware Critical · CVSS 9.8

Spring Data Commons — SpEL injection / remote code execution via property binder

CVSS: 9.8; nvd
EPSS: —
KEV: Listed; ransomware
Class: oss containerizable; CWE-94, NVD-CWE-Other

Description

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

Search profile — drives PoC discovery

Symbols MapDataBinderProjectingMethodInterceptorProxyProjectionFactoryMapPropertyAccessorSpelExpressionspelExpressionParserEvaluationContextStandardEvaluationContextRepositoryPropertyAccessorprojection-based request payload bindingSpring Data REST

Keywords CVE-2018-1273Spring Data Commons RCESpring Data REST property binder exploitSpEL injection Spring DataSpring Data Commons PoCMapDataBinder exploitSpring Data Commons 1.13Spring Data Commons 2.0projection binding RCESpring Data REST unauthenticated RCE

Versions: 1.13.0 to 1.13.9, 2.0.0 to 2.0.4 (and older unsupported versions)

Ranked PoCs (42) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

knqyf263/CVE-2018-1273 valid MVP

containerized · known researcher

gh_search · Dockerfile

★ 10
hktalent/bug-bounty candidate

known researcher

trickest

★ 0
XTeam-Wing/RedTeaming2020 candidate

known researcher

trickest

★ 0
wearearima/poc-cve-2018-1273 needs review

recent activity

gh_search · Java

★ 24
jas502n/cve-2018-1273 needs review

recent activity

gh_search · Python

★ 58
webr0ck/poc-cve-2018-1273 needs review

gh_search · Java

★ 2
Agilevatester/SpringSecurity needs review

trickest

★ 0
Agilevatester/SpringSecurityV1 needs review

trickest

★ 0
CLincat/vulcat needs review

trickest

★ 0
HackJava/HackSpring needs review

trickest

★ 0
HackJava/Spring needs review

trickest

★ 0
Ljw1114/SpringFramework-Vul needs review

trickest

★ 0
NorthShad0w/FINAL needs review

trickest

★ 0
PuddinCat/GithubRepoSpider needs review

trickest

★ 0
Secxt/FINAL needs review

trickest

★ 0
SexyBeast233/SecBooks needs review

trickest

★ 0
SugarP1g/LearningSecurity needs review

trickest

★ 0
Tim1995/FINAL needs review

trickest

★ 0
Whoopsunix/PPPVULNS needs review

trickest

★ 0
asa1997/topgear_test needs review

trickest

★ 0
ax1sX/SpringSecurity needs review

trickest

★ 0
bkhablenko/CVE-2017-8046 needs review

trickest

★ 0
hdgokani/CVE-2018-1273 needs review

recent activity

gh_search · Java

★ 0
huimzjty/vulwiki needs review

trickest

★ 0
ilmari666/cybsec needs review

trickest

★ 0
j5s/HacLang needs review

trickest

★ 0
j5s/HacLang-1 needs review

trickest

★ 0
jiangsir404/POC-S needs review

trickest

★ 0
just0rg/Security-Interview needs review

trickest

★ 0
langu-xyz/JavaVulnMap needs review

trickest

★ 0
lnick2023/nicenice needs review

trickest

★ 0
nBp1Ng/FrameworkAndComponentVulnerabilities needs review

trickest

★ 0
nBp1Ng/SpringFramework-Vul needs review

trickest

★ 0
onewinner/VulToolsKit needs review

trickest

★ 0
qiuluo-oss/Tiger needs review

trickest

★ 0
seal-community/patches needs review

trickest

★ 0
snowlovely/HacLang needs review

trickest

★ 0
superlink996/chunqiuyunjingbachang needs review

trickest

★ 0
tomoyamachi/gocarts needs review

trickest

★ 0
whoadmin/pocs needs review

trickest

★ 0
zhengjim/loophole needs review

trickest

★ 0
zisigui123123s/FINAL needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

Affected packages

Maven	org.springframework.data:spring-data-commons	1.13.0 → 1.13.11
Maven	org.springframework.data:spring-data-commons	2.0.0 → 2.0.6

References

Status: enriched · ingested 2026-06-16T00:00:58.000Z · profiled 2026-06-16T18:19:23.017Z