Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webmvc@4.0.0
purl pkg:maven/org.springframework/spring-webmvc@4.0.0
Tags Ghost
Next non-vulnerable version 7.0.9
Latest non-vulnerable version 7.0.9
Risk score 4.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-hhm4-hwq6-3c6w
Aliases:
CVE-2014-3625
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 … There are no reported fixed by versions.
GHSA-8cmm-qj8g-fcp6
Aliases:
CVE-2014-0054
Cross-Site Request Forgery in Spring Framework The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 … There are no reported fixed by versions.
GHSA-f93f-g33r-8pcp
Aliases:
CVE-2014-0225
Improper Restriction of XML External Entity Reference in Spring Framework When processing user provided XML documents, the Spring Framework 4.0.0 … There are no reported fixed by versions.
GHSA-ff7p-jqjm-v66h
Aliases:
CVE-2014-1904
Improper Neutralization of Input During Web Page Generation in Spring Framework Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC …
4.0.2.RELEASE
Vulnerable
This package is not known to fix any advisories.