Skip to content
OpenAdvisories
Unscored RHSA-2011:0175 1 CVE

Red Hat Security Advisory: JBoss Web Framework Kit 1.0.0 removal

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Jboss Web Framework Kit 1 jboss_web_framework_kit:1::el4 jboss-wfk-1.0.0-uninstall 0:1.0.0-3.ep5.el4

Vulnerabilities 1

  • Medium —
    CVE-2010-1622 Public exploit EPSS 52%

    Improper Control of Generation of Code ('Code Injection') in Spring Framework

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

    org.springframework:spring Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/jbossnetwork/
  • article
    http://docs.redhat.com/docs/en-US/JBoss_Web_Framework_Kit/1.1/html/Release_Notes_1.1.0/Installation_Notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=606706
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0175.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1622
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1622