Lucene search
HistoryNov 20, 2014 - 5:50 p.m.
CVE-2014-3625
pivotal
spring framework
cve-2014-3625
directory traversal
remote attack
static resource handling
9 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
75.6%
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.
Related
prion
prion
Directory traversal
2014-11-20 17:50:00
ubuntucve
ubuntucve
CVE-2014-3625
2014-11-20 00:00:00
github
github
osv
osv
libspring-java - security update
2019-07-13 00:00:00
libspring-java vulnerabilities
2021-03-17 17:02:03
debiancve
debiancve
CVE-2014-3625
2014-11-20 17:50:00
redhat
redhat
ibm
ibm
nessus
nessus
Debian DLA-1853-1 : libspring-java security update
2019-07-15 00:00:00
Ubuntu 16.04 ESM : Spring Framework vulnerabilities (USN-4774-1)
2023-10-20 00:00:00
debian
debian
[SECURITY] [DLA 1853-1] libspring-java security update
2019-07-13 21:20:48
openvas
openvas
Debian: Security Advisory (DLA-1853-1)
2019-07-14 00:00:00
Ubuntu: Security Advisory (USN-4774-1)
2023-01-27 00:00:00
ubuntu
ubuntu
Spring Framework vulnerabilities
2021-03-17 00:00:00
9 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
75.6%
Related for CVE-2014-3625