GitHub Advisoryadvisory · Maven

GHSA-rhcg-rwhx-qj3j Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

MEDIUM Published 2022-05-14 Modified 2024-03-18 Official page ↗
Aliases
CVE-2014-3578
Ecosystem
Maven
Packages
org.springframework:spring-core
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2022-07-07

Affected packages

• Maven org.springframework:spring-core: >= 3.0.0, < 3.2.9 → fixed in 3.2.9 • Maven org.springframework:spring-core: >= 4.0.0, < 4.0.5 → fixed in 4.0.5

Description

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

Related

Alias · CVE (1)

  • CVE-2014-3578 Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References