CVE-2015-5258: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.

Affected products

• Fedoraproject Fedora: version 23 only
• VMware Spring Social: before 1.1.3 (fixed in 1.1.3)

Published 2017-08-22. Last modified 2026-06-17.