Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-1622 Public exploit EPSS 52%

    Improper Control of Generation of Code ('Code Injection') in Spring Framework

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

    org.springframework:spring Maven