Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-webmvc

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-41242 Public exploit Scanner template

    CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

    Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an emb…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.3
    CVE-2024-38828 Public exploit

    CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

    Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

    Spring Spring libspring-java libspring-java Debian Ubuntu Maven
  • Medium —
    CVE-2014-3625 Public exploit

    Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

    Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.

    libspring-java libspring-java org.springframework:spring-webmvc Debian Ubuntu Maven