Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2014-3578 @ Maven-org.springframework:spring-core-3.2.4.RELEASE #10

Open
YairCx opened this issue May 16, 2022 · 0 comments
Open

CVE-2014-3578 @ Maven-org.springframework:spring-core-3.2.4.RELEASE #10

YairCx opened this issue May 16, 2022 · 0 comments

Comments

@YairCx
Copy link
Owner

YairCx commented May 16, 2022

Vulnerable Package issue exists @ Maven-org.springframework:spring-core-3.2.4.RELEASE in branch main

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

Namespace: YairCx
Repository: ASTlab2
Repository Url: https://github.com/YairCx/ASTlab2
CxAST-Project: YairCx/ASTlab2
CxAST platform scan: cc48cc74-4aac-45f1-b13f-b3acb2a872a3
Branch: main
Application: ASTlab2
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-22


Addition Info
Remediation Upgrade Recommendation: 5.2.20.RELEASE


References
Advisory
Issue
Commit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant