| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework:spring-core | ≥ 3.0.0, < 3.2.9≥ 4.0.0, < 4.0.5 | 3.2.94.0.5 |
| spring framework | ≥ 3.2.0, < 3.2.9≥ 4.0.0, < 4.0.5 | 3.2.94.0.5 |
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free