Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-messaging

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-1275 EPSS 58%

    Spring Framework has Improperly Implemented Security Check for Standard

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…

    Spring by Pivotal Spring Framework org.springframework:spring-messaging Maven
  • Critical 9.8
    CVE-2018-1270 Public exploit EPSS 78%

    Spring Framework allows applications to expose STOMP over WebSocket endpoints

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…

    Spring by Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven