Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-1904HistoryMar 20, 2014 - 4:55 p.m.
CVE-2014-1904
2014-03-2016:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.8%
Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libspring-java | < 3.0.6.RELEASE-13 | libspring-java_3.0.6.RELEASE-13_all.deb |
| Debian | 11 | all | libspring-java | < 3.0.6.RELEASE-13 | libspring-java_3.0.6.RELEASE-13_all.deb |
| Debian | 10 | all | libspring-java | < 3.0.6.RELEASE-13 | libspring-java_3.0.6.RELEASE-13_all.deb |
| Debian | 999 | all | libspring-java | < 3.0.6.RELEASE-13 | libspring-java_3.0.6.RELEASE-13_all.deb |
| Debian | 13 | all | libspring-java | < 3.0.6.RELEASE-13 | libspring-java_3.0.6.RELEASE-13_all.deb |
Related
osv
osv
libspring-java - security update
2014-03-29 00:00:00
ubuntucve
ubuntucve
CVE-2014-1904
2014-03-20 00:00:00
cve
cve
CVE-2014-1904
2014-03-20 16:55:00
github
github
prion
prion
Cross site scripting
2014-03-20 16:55:00
securityvulns
securityvulns
CVE-2014-1904 XSS when using Spring MVC
2014-05-05 00:00:00
nessus
nessus
Debian DSA-2890-1 : libspring-java - security update
2014-03-31 00:00:00
debian
debian
[SECURITY] [DSA 2890-1] libspring-java security update
2014-03-29 19:21:40
openvas
openvas
Debian: Security Advisory (DSA-2890-1)
2014-03-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0155)
2022-01-28 00:00:00
Debian Security Advisory DSA 2890-1 (libspring-java - security update)
2014-03-29 00:00:00
mageia
mageia
Updated springframework packages fix multiple vulnerabilities
2014-04-03 05:07:29
redhat
redhat
(RHSA-2014:0401) Moderate: Red Hat JBoss A-MQ 6.1.0 update
2014-04-14 13:36:41
(RHSA-2014:0400) Moderate: Red Hat JBoss Fuse 6.1.0 update
2014-04-14 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.8%
Related for DEBIANCVE:CVE-2014-1904