Lack of data validation - Path Traversal In org.springframework:spring-core
Description
Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 3.2.18, 4.2.9, 4.3.5 | ||
 debian 13 | 4.3.5-1 | ||
maven | 3.2.18, 4.2.9, 4.3.5 | ||
maven | - | ||
debian 12 | 4.3.5-1 | ||
debian 14 | 4.3.5-1 | ||
debian 11 | 4.3.5-1 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13.