| Advisory ID |
project_kb_statements/CVE-2015-3192 |
| Aliases |
|
| Summary |
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.
|
| Status |
Published |
|
Exploitability |
0.5
|
| Weighted Severity |
0.0
|
| Risk |
|
| Affected and Fixed Packages |
Package Details
|
| Introduced and Fixed Package Commit Patches |
Package Commit Patches Details
|
Weaknesses (0)
| Reference id |
Reference type |
URL |
|
There are no known references.
|
|
No exploits are available.
|
No EPSS data available for this advisory.
| Patch URL |
|
There are no known patches.
|
|
There are no known vectors.
|
There are no SSVC decisions available.