Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 236
GHSA-wv88-pf73-x22p
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
GHSA-f866-m9mv-2xr3
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
GHSA-ff7p-jqjm-v66h
Improper Neutralization of Input During Web Page Generation in Spring Framework
GHSA-rhcg-rwhx-qj3j
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
GHSA-hhm4-hwq6-3c6w
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
GHSA-f93f-g33r-8pcp
Improper Restriction of XML External Entity Reference in Spring Framework
GHSA-g6hf-f9cq-q7w7
Cross-Site Request Forgery in Spring Framework
GHSA-rp4p-g69r-438x
Cross-Site Request Forgery in Spring Framework
GHSA-8cmm-qj8g-fcp6
Cross-Site Request Forgery in Spring Framework
GHSA-vp63-rrcm-9mph
Missing XML Validation in Spring Framework
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-wv88-pf73-x22p Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework | 53% Средний | около 3 лет назад | |
| GHSA-f866-m9mv-2xr3 Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data | 20% Средний | около 3 лет назад | |
| GHSA-ff7p-jqjm-v66h Improper Neutralization of Input During Web Page Generation in Spring Framework | 2% Низкий | около 3 лет назад | |
| GHSA-rhcg-rwhx-qj3j Improper Limitation of a Pathname to a Restricted Directory in Spring Framework | 6% Низкий | около 3 лет назад | |
| GHSA-hhm4-hwq6-3c6w Improper Limitation of a Pathname to a Restricted Directory in Spring Framework | 29% Средний | около 3 лет назад | |
| GHSA-f93f-g33r-8pcp Improper Restriction of XML External Entity Reference in Spring Framework | CVSS3: 8.8 | 0% Низкий | около 3 лет назад |
| GHSA-g6hf-f9cq-q7w7 Cross-Site Request Forgery in Spring Framework | 73% Высокий | около 3 лет назад | |
| GHSA-rp4p-g69r-438x Cross-Site Request Forgery in Spring Framework | 84% Высокий | около 3 лет назад | |
| GHSA-8cmm-qj8g-fcp6 Cross-Site Request Forgery in Spring Framework | 35% Средний | около 3 лет назад | |
| GHSA-vp63-rrcm-9mph Missing XML Validation in Spring Framework | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу