ar.com.onready:spring-resttemplate-logger (1.0.2), br.com.ledgertec:rap-conector-client (>=0.9.0-1, <=1.0.0) +109 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.0.release)

org.springframework:spring-web MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ar.com.onready:spring-resttemplate-logger 1.0.2 - br.com.ledgertec:rap-conector-client...

com.bekk.boss:maven-jetty-pluto-embedded (1.0.1), de.eonas.portal:opencmsportal (>=8.5.1.1, <=10.5.1.9) +32 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0.2)

org.springframework:spring-web MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded 1.0.1 - de.eonas.portal:opencmsportal =8.5.1.1, =8.5.1.1,...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +236 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.1.8.release)

org.springframework:spring-web MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release - at.molindo.social:spring-social-core...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

com.alibaba.csb.sdk:java (1.1.5.11), com.github.jweixin:jwx (>=1.0.0, <=1.1.1) +58 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.18.release)

org.springframework:spring-web MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.alibaba.csb.sdk:java 1.1.5.11 - com.github.jweixin:jwx =1.0.0, =1.8.2, =1.8.2, =1.8.2,...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +5 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.5.2)

org.springframework:spring-web MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

be.looorent:spring-security-jwt (>=0.1, <=0.8), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2) +212 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.1.release)

org.springframework:spring-web MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - be.looorent:spring-security-jwt =0.1, =2.0, =2.0, =1.1.4-release, =1.1.4-release,...

br.com.anteros:anteros-jsondoc-maven-plugin (1.0.0), br.com.anteros:anteros-jsondoc-springmvc (1.0.0) +62 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.1.0.release)

org.springframework:spring-web MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.anteros:anteros-jsondoc-maven-plugin 1.0.0 - br.com.anteros:anteros-jsondoc-springmv...

club.easy-utils:easy-wepay (>=0.0.1-snaoshot, <=0.0.2-snaoshot), club.easy-utils:easy-weprogram (>=0.0.1-snaoshot, <=1.0.2.1) +44 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.17.release)

org.springframework:spring-web MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - club.easy-utils:easy-wepay =0.0.1-snaoshot, =0.0.1-snaoshot, =1.2, =1.0.0, =1.0.0, =1.0.0,...

com.dell.cpsd:discovered-nodes-capabilities-client-java (1.0.0), com.dell.cpsd:identity-service-api (1.2.0) +188 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.8.release)

org.springframework:spring-web MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.dell.cpsd:discovered-nodes-capabilities-client-java 1.0.0 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.apigee.edge.config:apigee-config-maven-plugin (>=1.3, <=2.2.2) +337 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.20.release)

org.springframework:spring-web MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +722 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.2.release)

org.springframework:spring-web MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - au.com.mountain-pass:hyperstate-client =1, =1, =1, =1, =1, =1.0.0-rc, =0.0.26, =0.0.26,...

com.github.seykron:htmlunit-runner-freemarker (1.0), com.google.code.webworkwebflow:webworkwebflow-parent (1.0.2) +15 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0)

org.springframework:spring-web MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 -...

capital.scalable:spring-auto-restdocs-core (>=1.0.10, <=1.0.13), cc.catalysts.boot:cat-boot-api (>=0.2.13, <=0.2.28) +761 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.11.release)

org.springframework:spring-web MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - capital.scalable:spring-auto-restdocs-core =1.0.10, =0.2.13, =0.2.13, =0.2.13, =1.0.0,...

com.gitee.mrxiao746:mrxiao-util (>=1.1, <=1.3.6), com.gitee.mrxiao746:xx (>=1.0, <=1.0.7) +56 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.9.release)

org.springframework:spring-web MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.gitee.mrxiao746:mrxiao-util =1.1, =1.0, =1.0.0-rc6, =1.4.1, =1.4.1, =1.4.1, =1.4.2 -...

org.acegisecurity:acegi-security-cas (>=1.0.5, <=1.0.7), org.acegisecurity:acegi-security-samples-contacts (1.0.7) +4 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (1.2.9)

org.springframework:spring-web MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security-cas =1.0.5, =1.0.7 -...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +84 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.1.1.release)

org.springframework:spring-web MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4, =1.0....

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

Path Traversal

org.springframework:spring-webmvc and org.springframework:spring-webflux are vulnerable to Path Traversal. The vulnerability is due to inadequate validation of file paths in HTTP requests, allowing access to files on the file system when using RouterFunctions with a FileSystemResource location...

org.springframework:spring-web used by Jira 9 contains vulnerabilities

Jira 9 and possibly the upcoming Jira 10 are affected by CVE-2024-38808. https://spring.io/security/cve-2024-38808 https://asecurityteam.atlassian.net/browse/VULN-1409329...