Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

← September 2011 2011 / October November 2011 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2011-2894 Public exploit

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untru…

org.springframework.security:spring-security-core org.springframework:spring-core Maven

Oct 4, 2011