Product · Spring by Pivotal

Spring Framework

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2018-1274

Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation

Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests agains…

Spring by Pivotal Spring Framework org.springframework.data:spring-data-commons Maven

Apr 18, 2018
High 7.5

CVE-2018-1272

Possible privilege escalation in org.springframework:spring-core

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote cli…

Spring by Pivotal Spring Framework libspring-java org.springframework:spring-core Debian Maven

Apr 6, 2018