VulnerableCode Package Details - pkg:maven/org.springframework/spring-webmvc@4.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.springframework/spring-webmvc@4.2

Essentials
History (1)

purl	pkg:maven/org.springframework/spring-webmvc@4.2
Tags	Ghost

Next non-vulnerable version	5.2.20.RELEASE
Latest non-vulnerable version	7.0.6
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-j3wr-npbv-8qcw Aliases: CVE-2016-9878 GHSA-2m8h-fgr8-2q9w	An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.	4.2.9 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 4.2.9.RELEASE Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 4.2.9.RELEASE.4.2 Affected by 0 other vulnerabilities. 4.3.5 Affected by 0 other vulnerabilities. 4.3.5.RELEASE Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-j3wr-npbv-8qcw
Aliases:
CVE-2016-9878
GHSA-2m8h-fgr8-2q9w

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.

4.2.9
Affected by 1 other vulnerability.

4.2.9.RELEASE
Affected by 4 other vulnerabilities.

4.2.9.RELEASE.4.2
Affected by 0 other vulnerabilities.

4.3.5
Affected by 0 other vulnerabilities.

4.3.5.RELEASE
Affected by 5 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T12:47:08.315405+00:00	GitLab Importer	Affected by	VCID-j3wr-npbv-8qcw	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2016-9878.yml	38.0.0