Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 436
GHSA-v596-fwhq-8x48
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
GHSA-cxrj-66c5-9fmh
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
GHSA-g8hw-794c-4j9g
Path Traversal in org.springframework:spring-core
GHSA-pgf9-h69p-pcgf
Files or Directories Accessible to External Parties in org.springframework:spring-core
GHSA-8crv-49fr-2h6j
Spring Security and Spring Framework may not recognize certain paths that should be protected
GHSA-p5hg-3xm3-gcjg
Spring Framework allows applications to expose STOMP over WebSocket endpoints
GHSA-4487-x383-qpph
Possible privilege escalation in org.springframework:spring-core
GHSA-3rmv-2pg5-xvqj
Spring Framework has Improperly Implemented Security Check for Standard
GHSA-6v7w-535j-rq5m
Pivotal Spring Framework DoS Attack with XML Input
GHSA-45vg-2v73-vm62
Moderate severity vulnerability that affects org.springframework:spring-core
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-v596-fwhq-8x48 Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core | CVSS3: 5.3 | 3% Низкий | около 8 лет назад | |
GHSA-cxrj-66c5-9fmh Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass | CVSS3: 8.8 | 2% Низкий | около 8 лет назад | |
GHSA-g8hw-794c-4j9g Path Traversal in org.springframework:spring-core | CVSS3: 5.9 | 30% Средний | около 8 лет назад | |
GHSA-pgf9-h69p-pcgf Files or Directories Accessible to External Parties in org.springframework:spring-core | CVSS3: 8.6 | 3% Низкий | около 8 лет назад | |
GHSA-8crv-49fr-2h6j Spring Security and Spring Framework may not recognize certain paths that should be protected | CVSS3: 7.5 | 3% Низкий | около 8 лет назад | |
GHSA-p5hg-3xm3-gcjg Spring Framework allows applications to expose STOMP over WebSocket endpoints | CVSS3: 9.8 | 77% Высокий | около 8 лет назад | |
GHSA-4487-x383-qpph Possible privilege escalation in org.springframework:spring-core | CVSS3: 7.5 | 3% Низкий | около 8 лет назад | |
GHSA-3rmv-2pg5-xvqj Spring Framework has Improperly Implemented Security Check for Standard | CVSS3: 9.8 | 57% Средний | около 8 лет назад | |
GHSA-6v7w-535j-rq5m Pivotal Spring Framework DoS Attack with XML Input | CVSS3: 5.5 | 3% Низкий | около 8 лет назад | |
GHSA-45vg-2v73-vm62 Moderate severity vulnerability that affects org.springframework:spring-core | 2% Низкий | около 8 лет назад |
Уязвимостей на страницу