Pivotal Spring Framework
7 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-15756 | 5.1 ; 5.0.0 – 5.0.9 ; 4.3 – 4.3.19 | DoS Attack via Range Requests | HIGH 7.5 | 8.8 % | ||
| CVE-2018-11040 | 5.0.x – < 5.0.7 ; 4.3.x – < 4.3.18 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable | HIGH 7.5 | 3.2 % | ||
| CVE-2018-11039 | 5.0.x – < 5.0.7 ; 4.3.x – < 4.3.18 | Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to c | MEDIUM 5.9 | 2.8 % | ||
| CVE-2018-1258 | 5.0.5 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using met | HIGH 8.8 | 2.5 % | ||
| CVE-2018-1257 | 5.0.x prior to 5.0.6; 4.3.x prior to 4.3.17 | Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expos | MEDIUM 6.5 | 3.0 % | ||
| CVE-2016-5007 | 3.2.x ; 4.0.x ; 4.1.x ; … | Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization | HIGH 7.5 | 2.8 % | ||
| CVE-2014-0225 | 4.0.0 to 4.0.4 ; 3.0.0 to 3.2.8 ; Earlier unsupported versions may be affected | When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions | HIGH 8.8 | 1.5 % |