Mitigation for CVE-2018-1230

Products

• Developer Support for Spring

Issue/Introduction

All versions of Spring Batch Admin are affected by CVE-2018-1230 - Cross Site Request Forgery (CSRF) protection. 

Spring Batch Admin has reached end of life as of January 1, 2018.

 

For reference:

• Spring Security Advisory - CVE-2018-1230 

Resolution

The recommended replacement for managing and monitoring Spring Batch jobs going forward are

• VMware Tanzu Data Flow
• Tanzu Data Flow on Kubernetes
• Spring Cloud Data Flow (available until Jun-2029)

All product listed above are commercial products.They also supports Stream jobs.