net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0-m5)

org.springframework:spring-webmvc MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2016-9878 Source advisory:...

com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0)

org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +1400 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.3.0.release, <=4.3.4.release)

org.springframework:spring-webmvc MAVEN version =4.3.0.release, =1, =1, =1, =1, =1, =0.1, =1.0.0-rc, =1.6, =1.6, =1.7.0, =0.0.26, =0.0.26, =0.9.5 and more Source cves: CVE-2016-9878 Source advisory: OSV:GHSA-2M8H-FGR8-2Q9W...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +1400 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.3.0.release, <=4.3.4.release)

org.springframework:spring-webmvc MAVEN version =4.3.0.release, =1, =1, =1, =1, =1, =0.1, =1.0.0-rc, =1.6, =1.6, =1.7.0, =0.0.26, =0.0.26, =0.9.5 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...

at.chrl:chrl-orm-spring-integration (1.1.0), au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18) +1406 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.2.0.release, <=4.2.8.release)

org.springframework:spring-webmvc MAVEN version =4.2.0.release, =3.4.0, =3.5.4-rc.0, =1, =1.4, =1.4, =1.0.4, =0.0.10, =1.6.0, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.22 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...

at.chrl:chrl-orm-spring-integration (1.1.0), au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18) +1406 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.2.0.release, <=4.2.8.release)

org.springframework:spring-webmvc MAVEN version =4.2.0.release, =3.4.0, =3.5.4-rc.0, =1, =1.4, =1.4, =1.0.4, =0.0.10, =1.6.0, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.22 and more Source cves: CVE-2016-9878 Source advisory: OSV:GHSA-2M8H-FGR8-2Q9W...

cn.fastoo:fastoo-java-api (20171130), com.github.lynzabo.codegen:codegen-test (1.0-release) +37 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.5.4)

org.springframework:spring-webmvc MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.fastoo:fastoo-java-api 20171130 - com.github.lynzabo.codegen:codegen-test 1.0-release -...

Directory Traversal

spring-webmvc is vulnerable to directory traversal attack. The vulnerability exists due to the improper sanitization of the path values which allows valid Windows files to be served as static resources. This vulnerability only affects spring-webmvc running on Windows which allows serving files wi...

org.springframework.data:spring-data-rest-hal-browser (3.0.0.release), org.springframework.data:spring-data-rest-webmvc (3.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (3.0.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

Directory Traversal

spring-webmvc is vulnerable to directory traversal. Paths provided to the ResourceServlet are not properly sanitized, allowing directory traversal attacks...

欧朋浏览器之广告主后台敏感信息泄漏漏洞（泄漏内容证明）

简要描述： J2EE架构安全 详细说明： 泄漏点： http://59.151.113.225/WEB-INF/web.xml http://59.151.113.225/WEB-INF/spring/webmvc-config.xml 漏洞证明： Spring+Freemaker 反编译class文件...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1099 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.7.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =0.4.2, =1.0-b1 and more Source cves: CVE-2014-1904 Source advisory: MEND:CVE-2014-1904...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), ch.ralscha:extdirectspring (1.4.0) +75 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=4.0.0.release, <=4.0.1.release)

org.springframework:spring-webmvc MAVEN version =4.0.0.release, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-1904 Source advisory: MEND:CVE-2014-1904...