Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webmvc@4.0-alpha0
purl pkg:maven/org.springframework/spring-webmvc@4.0-alpha0
Tags Ghost
Next non-vulnerable version 7.0.9
Latest non-vulnerable version 7.0.9
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2014-3578

Directory traversal flaw Directory traversal vulnerability in this package allows remote attackers to read arbitrary files via a crafted URL.
4.0.5.RELEASE
Vulnerable
3.2.9.RELEASE
Vulnerable
CVE-2014-0054

XML External Entities This package does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause …
3.2.8.RELEASE
Vulnerable
4.0.2.RELEASE
Vulnerable
CVE-2014-3625

Directory traversal flaw Directory traversal vulnerability in this package allows remote attackers to read arbitrary files via unspecified vectors, related …
3.2.12.RELEASE
Vulnerable
4.0.8.RELEASE
Vulnerable
4.1.2.RELEASE
Vulnerable
This package is not known to fix any advisories.