Archive
5 December 2012
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High —CVE-2011-2730 EPSS 12%
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) nam…