system
Identify the affected product in <CVE-2018-1257>.
user
Which product is affected by <CVE-2018-1257>?
assistant
The affected product is Spring Framework and version: 5.0.x prior to 5.0.6; 4.3.x prior to 4.3.17.