Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 436
GHSA-rfmp-97jj-h8m6
Improper Output Neutralization for Logs in Spring Framework
GHSA-vpr3-f594-mg5g
Improper Control of Generation of Code ('Code Injection') in Spring Framework
GHSA-wv88-pf73-x22p
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
GHSA-ff7p-jqjm-v66h
Improper Neutralization of Input During Web Page Generation in Spring Framework
GHSA-f866-m9mv-2xr3
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
GHSA-rhcg-rwhx-qj3j
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
GHSA-8cmm-qj8g-fcp6
Cross-Site Request Forgery in Spring Framework
GHSA-f93f-g33r-8pcp
Improper Restriction of XML External Entity Reference in Spring Framework
GHSA-g6hf-f9cq-q7w7
Cross-Site Request Forgery in Spring Framework
GHSA-hhm4-hwq6-3c6w
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-rfmp-97jj-h8m6 Improper Output Neutralization for Logs in Spring Framework | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад | |
GHSA-vpr3-f594-mg5g Improper Control of Generation of Code ('Code Injection') in Spring Framework | 52% Средний | больше 4 лет назад | ||
GHSA-wv88-pf73-x22p Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework | 12% Средний | больше 4 лет назад | ||
GHSA-ff7p-jqjm-v66h Improper Neutralization of Input During Web Page Generation in Spring Framework | 7% Низкий | больше 4 лет назад | ||
GHSA-f866-m9mv-2xr3 Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data | 9% Низкий | больше 4 лет назад | ||
GHSA-rhcg-rwhx-qj3j Improper Limitation of a Pathname to a Restricted Directory in Spring Framework | 6% Низкий | больше 4 лет назад | ||
GHSA-8cmm-qj8g-fcp6 Cross-Site Request Forgery in Spring Framework | 91% Критический | больше 4 лет назад | ||
GHSA-f93f-g33r-8pcp Improper Restriction of XML External Entity Reference in Spring Framework | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад | |
GHSA-g6hf-f9cq-q7w7 Cross-Site Request Forgery in Spring Framework | 91% Критический | больше 4 лет назад | ||
GHSA-hhm4-hwq6-3c6w Improper Limitation of a Pathname to a Restricted Directory in Spring Framework | 10% Низкий | больше 4 лет назад |
Уязвимостей на страницу