Search for packages
| purl | pkg:maven/org.springframework/spring-core@5.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2019-3795
|
Insufficient Entropy in PRNG Spring Security contain an insecure randomness vulnerability when using `SecureRandomFactoryBean#setSeed` to configure a `SecureRandom` instance. In … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-g8hw-794c-4j9g
Aliases: CVE-2018-1271 |
Path Traversal in org.springframework:spring-core Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported … | There are no reported fixed by versions. |
|
GHSA-rcpf-vj53-7h2m
Aliases: CVE-2018-1257 |
Denial of Service in org.springframework:spring-core Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported … | There are no reported fixed by versions. |
|
GHSA-4487-x383-qpph
Aliases: CVE-2018-1272 |
Possible privilege escalation in org.springframework:spring-core Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older … | There are no reported fixed by versions. |
|
GHSA-v596-fwhq-8x48
Aliases: CVE-2018-1199 |
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and … | There are no reported fixed by versions. |
|
CVE-2018-1199
|
Improper Input Validation Spring Security does not consider URL path parameters when processing security constraints. By adding a URL path … | There are no reported fixed by versions. |
|
CVE-2018-1275
Aliases: GHSA-3rmv-2pg5-xvqj |
Improper Control of Generation of Code ('Code Injection') Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to … | There are no reported fixed by versions. |