Lack of data validation - Path Traversal In org.springframework:spring-core
Description
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 3.2.9, 4.0.5 | ||
 debian 13 | 3.2.13-1 | ||
debian 14 | 3.2.13-1 | ||
maven | 3.2.9.release, 4.0.5.release | ||
debian 11 | 3.2.13-1 | ||
debian 12 | 3.2.13-1 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13.