com.github.dblock.waffle:waffle-spring-security3 (1.8.1), com.github.hqstevenson.splunk:splunk.jms.activemq (>=1.1.0, <=2.1.1) +34 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (3.2.16.release)

org.springframework:spring-web MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.dblock.waffle:waffle-spring-security3 1.8.1 -...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +78 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.0.8.release)

org.springframework:spring-web MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webmvc 0.3...

com.berlioz:berlioz-sdk (1.1), com.monederobingo:libs (>=0.0.1, <=0.0.9) +29 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (3.0.2.release)

org.springframework:spring-web MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.berlioz:berlioz-sdk 1.1 - com.monederobingo:libs =0.0.1, =1.2-1, =0.1, =2.0-beta1,...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +317 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.22.release)

org.springframework:spring-web MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop =1.5.19.release, =1.5.19.release, =1.5.19.release...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +18 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (1.2.8)

org.springframework:spring-web MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.3, =2.0.11, =5.0.3, =5.0.5 and more Source cves:...

com.aol.microservices:micro-general-exception-mapper (>=0.78, <=0.91.8), com.aol.microservices:micro-jersey (>=0.64, <=0.91.8) +249 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (3.2.3.release)

org.springframework:spring-web MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.aol.microservices:micro-general-exception-mapper =0.78, =0.64, =0.82, =0.60, =1.0.1,...

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6), com.cognifide.aet:communication (>=2.0.0-rc2, <=2.1.6) +277 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.1.9.release)

org.springframework:spring-web MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.cognifide.aet:cleaner =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.apigee.edge.config:apigee-config-maven-plugin (>=1.3, <=2.2.2) +337 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.20.release)

org.springframework:spring-web MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

ai.optfor:spring-openai-api (>=0.1, <=0.3.25), ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3) +5620 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (>=6.0.0, <=6.0.17)

org.springframework:spring-web MAVEN version =6.0.0, =0.1, =0.0.22, =0.0.28, =0.0.11, =0.1.0, =0.1.0, =0.2.3, =0.1.0, =4.5.0-beta.1, =4.7.0-beta.0 - au.net.causal.shoelaces:shoelaces-apphome 3.0 - au.net.causal.shoelaces:shoelaces-assorted 3.0 - au.net.causal.shoelaces:shoelaces-jdbc 3.0 -...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +80 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.29.release)

org.springframework:spring-web MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate =2.3.12, =2.3.12,...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +234 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (3.1.1.release)

org.springframework:spring-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4, =1.0.6,...

ai.specformula:specformula-cucumber (>=0.0.3, <=1.0.0), ai.specformula:specformula-spring (>=0.0.3, <=1.0.0) +3799 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (>=6.1.0, <=6.1.4)

org.springframework:spring-web MAVEN version =6.1.0, =0.0.3, =0.0.3, =1.8.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =v1.0.26, =1.0.41 and more Source cves: CVE-2024-22259 Source advisory: MEND:CVE-2024-22259...

Server Side Request Forgery (SSRF)

org.springframework:spring-web is vulnerable to Open Redirect. The vulnerability is due to insufficient validation checks of the host URL within UriComponentsBuilder.java. If an application utilizes the host validation checks, an attacker can perform an open redirect or Server-Side Request Forger...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +932 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (4.3.9.release)

org.springframework:spring-web MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.7, =1.1.1, =1.0, =1.0.1, =1.1.12, =1.1.12,...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +234 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (3.1.1.release)

org.springframework:spring-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4, =1.0.6,...

com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1), com.antgroup.tugraph:tugraph-db-java-rpc-client-test (>=1.1.0, <=1.2.1) +161 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (3.2.11.release)

org.springframework:spring-web MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.antgroup.tugraph:tugraph-db-java-rpc-client =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +538 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (4.3.17.release)

org.springframework:spring-web MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6), ch.ralscha:extdirectspring (1.7.1) +523 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (4.3.4.release)

org.springframework:spring-web MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - be.looorent:jflu-producer-springmvc =0.1, =1.1, =1.0.10, =1.0, =1.0.7.oss, =1.0.7.oss,...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.4, <=3.0.1), br.net.woodstock.rockframework:rockframework-faces (>=2.0.0, <=2.0.8) +414 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (3.0.6.release)

org.springframework:spring-web MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.4, =2.0.0, =2.0.0, =2.0.0, =1.2.4,...