Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@4.0.0.M3
purl pkg:maven/org.springframework/spring-web@4.0.0.M3
Tags Ghost
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2013-6429

XML External Entity (XXE) injection The `SourceHttpMessageConverter` in this package does not disable external entity resolution, which allows remote attackers …
4.0.0.RELEASE
Vulnerable
3.2.5.RELEASE
Vulnerable
CVE-2013-7315

XML External Entity (XXE) injection This package does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent …
4.0.0.RELEASE
Vulnerable
3.2.4.RELEASE
Vulnerable
This package is not known to fix any advisories.