| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework:spring-webmvc | ≥ 4.2.0, < 4.2.9≥ 4.3.0, < 4.3.5< 3.2.18 | 4.2.94.3.53.2.18 |
| spring framework | = 4.2.0= 4.3.0≤ 3.2.0 | |
| spring framework | = 3.2.1= 3.2.10= 3.2.11= 3.2.12= 3.2.13= 3.2.14= 3.2.15= 3.2.16= 3.2.17= 3.2.2= 3.2.3= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.2.8= 3.2.9= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2.6= 4.2.7= 4.2.8= 4.3.1= 4.3.2= 4.3.3= 4.3.4 |
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free