org.springframework:spring-webmvc Security Advisories - Maven

maven org.springframework.boot:spring-boot-starter-webflux, org.springframework:spring-webflux, org.springframework.boot:spring-boot-starter-web, org.springframework:spring-webmvc, org.springframework:spring-beans

Moderate

over 5 years ago

CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdwbTQtZzJxai1qODV4

maven org.springframework:spring-webflux, org.springframework:spring-webmvc

High

over 5 years ago

RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3eDItOXE0OC12bTly

maven org.springframework:spring-webflux, org.springframework:spring-webmvc

High

almost 7 years ago

Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtOGgtZmdyOC0ycTl3

maven org.springframework:spring-webmvc

Filter by Severity

Moderate 6 High 6 Critical 1

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Advisories

org.springframework:spring-webmvc

Spring Framework MVC Applications Path Traversal Vulnerability GSA_kwCzR0hTQS1yOTM2LWd3eDUtdjUyZs4ABLLT

Spring Framework Path Traversal vulnerability GSA_kwCzR0hTQS1nNXZyLXJncW0tdmY3OM4ABCoa

Spring MVC controller vulnerable to a DoS attack GSA_kwCzR0hTQS13M2M4LTdyOGYtOWpwOM4ABBcJ

Path traversal vulnerability in functional web frameworks GSA_kwCzR0hTQS1jeDdmLWc2bXAtN2hxbc4AA_gn

Spring Framework vulnerable to denial of service GSA_kwCzR0hTQS12OTRoLWh2aGctbWY5aM4AA3ZR

Improper Neutralization of Input During Web Page Generation in Spring Framework GSA_kwCzR0hTQS1mZjdwLWpxam0tdjY2aM4AATvq

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework GSA_kwCzR0hTQS1oaG00LWh3cTYtM2M2d83o4g

Improper Restriction of XML External Entity Reference in Spring Framework GSA_kwCzR0hTQS1mOTNmLWczM3ItOHBjcM3o4A

Cross-Site Request Forgery in Spring Framework GSA_kwCzR0hTQS04Y21tLXFqOGctZmNwNs3o_A

Remote Code Execution in Spring Framework GSA_kwCzR0hTQS0zNnAzLXdqbWctaDk0eM03aQ

CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdwbTQtZzJxai1qODV4

RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3eDItOXE0OC12bTly

Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtOGgtZmdyOC0ycTl3

Filter by Severity