CVE-2017-12882: Spring Batch Admin Project Spring Batch Admin

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

Affected products

• Spring Batch Admin Project Spring Batch Admin: up to and including 1.2.1

Published 2017-08-18. Last modified 2026-06-17.