Archive

4 October 2011

Vulnerabilities first published on this day (UTC), newest first.

← September 2011 2011 / October /4 November 2011 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2011-2894 Public exploit

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untru…

org.springframework.security:spring-security-core org.springframework:spring-core Maven

Oct 4, 2011