GitHub Advisoryadvisory · Maven
GHSA-45vg-2v73-vm62 Moderate severity vulnerability that affects org.springframework:spring-core
MEDIUM
Official page ↗
- Aliases
- CVE-2015-0201
- Ecosystem
- Maven
- Packages
- org.springframework:spring-core
- Severity
- Moderate
- Reviewed
- 2020-06-16
Affected packages
• Maven org.springframework:spring-core: >= 4.1.0, < 4.1.5 → fixed in 4.1.5
Description
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
Related
Alias · CVE (1)
- CVE-2015-0201 The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-0201 advisory
- https://github.com/spring-projects/spring-framework/commit/d63cfc8eebc396be009e733a81ebb4c984811f6e web
- https://github.com/spring-projects/spring-framework/commit/dc5b5ca8ee09c890352f89b2dae58bc0132d6545 web
- https://github.com/advisories/GHSA-45vg-2v73-vm62 advisory
- https://github.com/spring-projects/spring-framework package
- https://pivotal.io/security/cve-2015-0201 web