Search for packages
| purl | pkg:maven/org.springframework/spring-oxm@5.0.13.RELEASE |
| Next non-vulnerable version | 5.0.19.RELEASE |
| Latest non-vulnerable version | 5.2.9.RELEASE |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2014-0225
|
When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions … | |
|
CVE-2014-0054
|
The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, … | |
|
CVE-2015-3192
|
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not … | |
|
CVE-2014-3578
|
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary … |