Linux Distros Unpatched Vulnerability : CVE-2016-5007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping...

OESA-2021-1416 springframework security update

The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson Wrox, 2002.it is a layered Java/J2ee application framework. Security Fixes: Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mapping...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +128 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.2.3.release)

org.springframework.security:spring-security-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.releas...

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

cn.taskflow.jsv:json-schema-validator (>=0.0.1, <=0.1.1), com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4) +92 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.7.release)

org.springframework:spring-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - cn.taskflow.jsv:json-schema-validator =0.0.1, =3.1.6, =3.1.6, =3.1.6, =0.10.0, =1.0,...

org.springframework.security:spring-security-acl (3.1.5.release), org.springframework.security:spring-security-aspects (3.1.5.release) +7 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.1.5.release)

org.springframework.security:spring-security-core MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl...

br.com.caelum.vraptor:vraptor-test (2.0.0), cc.concurrent:config-server (0.1) +527 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.4.release)

org.springframework:spring-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - br.com.caelum.vraptor:vraptor-test 2.0.0 - cc.concurrent:config-server 0.1 -...

com.myjeeva:spring-extensions (>=1.0.0, <=1.0.1), org.springframework.security:spring-security-acl (2.0.6.release) +6 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.6.release)

org.springframework.security:spring-security-core MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.myjeeva:spring-extensions =1.0.0, =1.0.1 -...

org.springframework.security:spring-security-acl (2.0.0), org.springframework.security:spring-security-adapters (2.0.0) +18 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.0)

org.springframework.security:spring-security-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl 2.0.0 -...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.btmatthews.atlas:atlas-jcr (1.0.1) +140 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.2.0.release)

org.springframework.security:spring-security-core MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1...

com.discursive.dao.generic:generic-dao (>=2.0, <=2.1), com.google.inject.extensions:guice-spring (2.0) +206 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0.6)

org.springframework:spring-core MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.discursive.dao.generic:generic-dao =2.0, =1.0, =0.9, =0.7.2, =0.0.1, =1.0.0, =1.1.2,...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +7753 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (>=4.0.0.release, <=4.3.0.release)

org.springframework:spring-core MAVEN version =4.0.0.release, =0.1.6, =0.1.4-sb1x, =0.1.0, =0.1.0, =1.1.0.release, =1.1.0.release, =1.1.0.m4, =1.1.0.release, =1.0.0-alpha-3, =0.0.1, =0.2, =1.1 and more Source cves: CVE-2016-5007 Source advisory: OSV:GHSA-8CRV-49FR-2H6J...

org.apache.cocoon:cocoon-ajax-impl (1.0.0-m3), org.apache.cocoon:cocoon-apples-impl (1.0.0-rc1) +141 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0.5)

org.springframework:spring-core MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.apache.cocoon:cocoon-ajax-impl 1.0.0-m3 - org.apache.cocoon:cocoon-apples-impl 1.0.0-rc1 -...

com.elibom:jogger (>=0.2.0, <=0.2.1), com.github.qiujiayu:autoload-cache (>=1.3, <=4.11) +142 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.10.release)

org.springframework:spring-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.elibom:jogger =0.2.0, =1.3, =4.1, =1.0.0.release, =1.0.0.release, =1.0.2, =1.0.2,...

com.github.junitrunner:junitrunner-unitils (>=0.0.1, <=0.0.2), com.sun.jersey:jersey-spring (0.8-ea) +98 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.5.2)

org.springframework:spring-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.github.junitrunner:junitrunner-unitils =0.0.1, =0.1, =3.2.0-rc1, =3.2.0-rc1, =3.2.0-rc1,...

com.github.dblock.waffle:waffle-spring-security2 (>=1.5, <=1.6), com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0) +201 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.7.release)

org.springframework.security:spring-security-core MAVEN version 2.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.5...

net.sf.dobo:dobo (1.0) potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2)

org.springframework:spring-core MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - net.sf.dobo:dobo 1.0 Source cves: CVE-2016-5007 Source advisory: OSV:GHSA-8CRV-49FR-2H6J...

com.ctlok:spring-webmvc-rythm (>=1.3.6, <=1.4.2), com.github.leleuj.springframework.security:spring-security-oauth-client (>=1.0.0, <=1.1.0) +137 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.1.0.release)

org.springframework.security:spring-security-core MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.ctlok:spring-webmvc-rythm =1.3.6, =1.0.0, =3.0.4,...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...