| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework:spring-webmvc | ≥ 3.0.4, < 3.2.12≥ 4.0.0, < 4.0.8≥ 4.1.0, < 4.1.2 | 3.2.124.0.84.1.2 |
| spring framework | ≥ 3.1.0, ≤ 3.1.4≥ 3.2.0, < 3.2.12≥ 4.0.0, < 4.0.8≥ 4.1.0, < 4.1.2 | 3.2.124.0.84.1.2 |
| spring framework | ≥ 3.0.4, ≤ 3.0.7 |
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free