net.sourceforge.openutils:openutils-bshd5 (0.1), net.sourceforge.openutils:openutils-deployment (0.1) +14 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (1.2.6)

org.springframework:spring-web MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.1 - net.sourceforge.openutils:openutils-deployment 0.1 ...

org.acegisecurity:acegi-security-cas (>=1.0.5, <=1.0.7), org.acegisecurity:acegi-security-samples-contacts (1.0.7) +4 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (1.2.9)

org.springframework:spring-web MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security-cas =1.0.5, =1.0.7 -...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

com.github.qiujiayu:autoload-cache (>=1.3, <=2.8), com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0) +44 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (3.2.10.release)

org.springframework:spring-web MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.qiujiayu:autoload-cache =1.3, =1.0.2, =1.0.2, =1.0.2, =1.2.0, =1.0.2, =1.2.0,...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +18 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (1.2.8)

org.springframework:spring-web MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.3, =2.0.11, =5.0.3, =5.0.5 and more Source cves:...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +13 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (2.0-m2)

org.springframework:spring-web MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 - org.apache.pluto:pluto-portal...

ar.com.onready:spring-resttemplate-logger (1.0.2), br.com.ledgertec:rap-conector-client (>=0.9.0-1, <=1.0.0) +109 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.0.0.release)

org.springframework:spring-web MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ar.com.onready:spring-resttemplate-logger 1.0.2 - br.com.ledgertec:rap-conector-client...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.coherentlogic.coherent.data-model:data-model-core (>=1.0.13-release, <=1.0.14-release) +36 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.0.1.release)

org.springframework:spring-web MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.13-release, =1.0.13-release, =4.1.0,...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +171 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.0.3.release)

org.springframework:spring-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release - at.molindo.social:spring-social-core...

com.bytebybyte:google-geocoding (>=3.0.0, <=3.0.1), com.bytebybyte:mapquest-open-geocoding (1.0.0) +102 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.0.7.release)

org.springframework:spring-web MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bytebybyte:google-geocoding =3.0.0, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.2.3.release,...

com.apcc4m:sdoc (1.0.0), com.foreach.across.modules:admin-web-module (>=1.0.0.release, <=1.1.0.release) +120 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.0.9.release)

org.springframework:spring-web MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.apcc4m:sdoc 1.0.0 - com.foreach.across.modules:admin-web-module =1.0.0.release,...

br.com.anteros:anteros-jsondoc-maven-plugin (1.0.0), br.com.anteros:anteros-jsondoc-springmvc (1.0.0) +62 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.1.0.release)

org.springframework:spring-web MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.anteros:anteros-jsondoc-maven-plugin 1.0.0 - br.com.anteros:anteros-jsondoc-springmv...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +651 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.1.6.release)

org.springframework:spring-web MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =0.0.6, =0.1.0, =0.1.5, =0.4.0, =0.4.0, =1.0.83-rc...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), africa.absa:inception-api (>=1.0.0, <=1.2.0) +38284 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (>=1.2.1, <=5.3.33)

org.springframework:spring-web MAVEN version =1.2.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =4.6.0.0 and more Source cves: CVE-2024-22262 Source advisory: MEND:CVE-2024-22262...

Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)

Summary Vulnerability with OpenJDK- CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20945, CVE-2024-20932, CVE-2024-20919, CVE-2024-20926, commons-compress CVE-2024-25710, CVE-2024-26308 , spring-web-5.3.27 CVE-2024-22243, spring-web-5.3.32CVE-2024-22259. This vulnerability has been...

Server Side Request Forgery (SSRF)

org.springframework:spring-web is vulnerable to Open Redirect. The vulnerability is due to insufficient validation checks of the host URL within UriComponentsBuilder.java. If an application utilizes the host validation checks, an attacker can perform an open redirect or Server-Side Request Forger...

com.webtide.hightide:hightide-resources (6.1h.8), net.sourceforge.openutils:openutils-spring (1.0.4) +63 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.0.6)

org.springframework:spring-web MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.webtide.hightide:hightide-resources 6.1h.8 - net.sourceforge.openutils:openutils-spring 1.0.4 -...

com.github.ideahut:sbms-hessian (>=1.0.0, <=1.0.1), com.github.ideahut:sbms-httpinvoker (1.0.1) +76 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.0.8)

org.springframework:spring-web MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.ideahut:sbms-hessian =1.0.0, =1.0.1, =5.0.0, =1.0, =2.1.7, =2.1.7, =2.1.7, =2.1.10 and...