Search for packages
| purl | pkg:maven/org.springframework/spring-oxm@3.0.2.RELEASE |
| Next non-vulnerable version | 4.2.9.RELEASE |
| Latest non-vulnerable version | 5.2.9.RELEASE |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rp4p-g69r-438x
Aliases: CVE-2013-4152 |
Cross-Site Request Forgery in Spring Framework The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the … |
Vulnerable |
|
GHSA-vp63-rrcm-9mph
Aliases: CVE-2013-7315 |
Missing XML Validation in Spring Framework The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not … |
Vulnerable |
|
CVE-2013-6430
|
Cross-site Scripting The `JavaScriptUtils.javaScriptEscape` method in `web/util/JavaScriptUtils.java` in Spring MVC in Spring Framework does not properly escape certain characters, which … |
Vulnerable |
|
CVE-2014-0225
|
Information disclosure via SSRF This package did not disable by default the resolution of URI references in a DTD declaration. … |
Vulnerable Vulnerable |
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2013-4152
|
Improper Restriction of XML External Entity Reference The Spring OXM wrapper when using the JAXB marshaller, does not disable entity … |
Vulnerable Vulnerable |