| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.webflow:spring-webflow | ≥ 3.0.0, < 3.0.2≥ 4.0.0, < 4.0.1≤ 2.5.1 | 3.0.24.0.1 |
| spring web flow | = 4.0.0≥ 3.0.0, < 3.0.1.1< 2.5.2 | 3.0.1.12.5.2 |
Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions.
Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free