| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.integration:spring-integration-file | ≥ 6.3.0, ≤ 6.3.14≥ 6.4.0, ≤ 6.4.11≥ 6.5.0, < 6.5.9≥ 7.0.0, < 7.0.5≤ 5.5.20 | 6.5.97.0.5 |
| spring integration | ≥ 6.3.0, < 6.3.15≥ 6.4.0, < 6.4.12≥ 6.5.0, < 6.5.8.1≥ 7.0.0, < 7.0.4.1< 5.5.21 | 6.3.156.4.126.5.8.17.0.4.15.5.21 |
A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content.
Affected versions: Spring Integration 7.0.0 through 7.0.4; 6.5.0 through 6.5.8; 6.4.0 through 6.4.11; 6.3.0 through 6.3.14; 5.5.0 through 5.5.20.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free