Search for packages
| purl | pkg:maven/org.springframework/spring-web@5.2.8.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-4wrc-f8pq-fpqp
Aliases: CVE-2016-1000027 |
Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution … |
Vulnerable |
|
GHSA-4gc7-5j7h-4qph
Aliases: CVE-2024-38820 |
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … | There are no reported fixed by versions. |
|
GHSA-2wrp-6fg6-hmc5
Aliases: CVE-2024-22262 |
Spring Framework URL Parsing with Host Validation Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a … |
Vulnerable |
|
GHSA-ccgv-vj62-xf9h
Aliases: CVE-2024-22243 |
Spring Web vulnerable to Open Redirect or Server Side Request Forgery Applications that use UriComponentsBuilder to parse an externally provided … | There are no reported fixed by versions. |
|
GHSA-hgjh-9rj2-g67j
Aliases: CVE-2024-22259 |
Spring Framework URL Parsing with Host Validation Vulnerability Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided … |
Vulnerable |
|
GHSA-2rmj-mq67-h97g
Aliases: CVE-2024-38809 |
Spring Framework DoS via conditional HTTP request ### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are … |
Vulnerable |
|
GHSA-gfwj-fwqj-fp3v
Aliases: CVE-2021-22118 |
Improper Privilege Management in Spring Framework In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2020-5397
|
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC … |