Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webmvc@3.0.0
purl pkg:maven/org.springframework/spring-webmvc@3.0.0
Tags Ghost
Next non-vulnerable version 7.0.9
Latest non-vulnerable version 7.0.9
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2013-6430

Possible XSS The `JavaScriptUtils.javaScriptEscape` method in `web/util/JavaScriptUtils.java` in Spring MVC in Spring Framework does not properly escape certain characters, which …
3.2.2.RELEASE
Vulnerable
GHSA-f93f-g33r-8pcp
Aliases:
CVE-2014-0225
Improper Restriction of XML External Entity Reference in Spring Framework When processing user provided XML documents, the Spring Framework 4.0.0 … There are no reported fixed by versions.
GHSA-ff7p-jqjm-v66h
Aliases:
CVE-2014-1904
Improper Neutralization of Input During Web Page Generation in Spring Framework Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC …
3.2.8.RELEASE
Vulnerable
This package is not known to fix any advisories.