Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@4-alpha0
purl pkg:maven/org.springframework/spring-web@4-alpha0
Tags Ghost
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2013-6429

XML External Entity (XXE) injection The `SourceHttpMessageConverter` in this package does not disable external entity resolution, which allows remote attackers …
4.0.0.RELEASE
Vulnerable
3.2.5.RELEASE
Vulnerable
CVE-2013-7315

XML External Entity (XXE) injection This package does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent …
4.0.0.RELEASE
Vulnerable
3.2.4.RELEASE
Vulnerable
CVE-2015-3192

DoS Attack with XML Input This package do not properly process inline DTD declarations when DTD is not entirely disabled, …
4.1.7.RELEASE
Vulnerable
3.2.14.RELEASE
Vulnerable
This package is not known to fix any advisories.