Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 6.0 | libspring-2.5-java | 2.5.6.SEC02-2+squeeze1 |
Vulnerabilities 1
-
High —CVE-2011-2730 EPSS 12%
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) nam…