Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9878US | high7.5 | — | ||
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlWEB
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlWEB
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlWEB
- http://www.securityfocus.com/bid/95072WEB
- http://www.securitytracker.com/id/1040698WEB
- https://access.redhat.com/errata/RHSA-2017:3115WEB
- https://github.com/advisories/GHSA-2m8h-fgr8-2q9wADVISORY
- https://github.com/spring-projects/spring-frameworkPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan