net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.0.8)

org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +627 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.3.14.release)

org.springframework:spring-webmvc MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =2.0.5, =2.0....

ch.ralscha:extdirectspring (>=1.0.4, <=1.0.11), com.github.greengerong:green.monitor (>=1.0, <=1.4) +302 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (3.0.5.release)

org.springframework:spring-webmvc MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.4, =1.0, =1.0.1.ga, =1.0.0, =1.0, =2011.11.07.release...

com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.0)

org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +324 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.2.5.release)

org.springframework:spring-webmvc MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +36 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.1.1.release)

org.springframework:spring-webmvc MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4,...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.27), ch.ralscha:extdirectspring (>=1.0.14, <=1.1.3) +84 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (3.0.7.release)

org.springframework:spring-webmvc MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ar.com.jmfsg:api-doc =0.0.20, =1.0.14, =3.0.10, =3.0.10, =1.2.2, =1.4.1, =3.0.0,...

Spring Framework Path Traversal vulnerability

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6), ch.ralscha:extdirectspring (1.7.1) +407 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.3.4.release)

org.springframework:spring-webmvc MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.looorent:jflu-producer-springmvc =0.1, =1.1, =1.0.10, =1.0, =1.0.7.oss, =1.0.7.oss...

cn.fastoo:fastoo-java-api (20171130), com.github.lynzabo.codegen:codegen-test (1.0-release) +37 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.5.4)

org.springframework:spring-webmvc MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.fastoo:fastoo-java-api 20171130 - com.github.lynzabo.codegen:codegen-test 1.0-release -...

ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1), com.github.tuxychandru:spring-mustache (1.0) +48 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (3.2.1.release)

org.springframework:spring-webmvc MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.3.0, =0.3.0, =1.0, =1.1.1.release, =1.2.0.release -...

ch.ralscha:extdirectspring (1.7.3), cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1) +877 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.3.12.release)

org.springframework:spring-webmvc MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.7.3 - cn.afterturn:easypoi-spring-boot-starter =0.1,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.0), com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6) +158 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.1.5.release)

org.springframework:spring-webmvc MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.0 -...

org.springframework.ws:spring-ws-core (1.0-m3) potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.0.2)

org.springframework:spring-webmvc MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework.ws:spring-ws-core 1.0-m3 Source cves: CVE-2024-38819 Source advisory:...

com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.0.7.release)

org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....

cn.chenzw.swagger:swagger-ext-all (1.0.1), cn.chenzw.swagger:swagger-ext-core (1.0.1) +216 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.3.24.release)

org.springframework:spring-webmvc MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.chenzw.swagger:swagger-ext-all 1.0.1 - cn.chenzw.swagger:swagger-ext-core 1.0.1 -...

com.github.dactiv.showcase:dactiv-base-curd (1.1.0.release), com.github.stephanarts:cas-server-integration-zeromq (>=0.0.1, <=0.0.8) +68 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (3.2.6.release)

org.springframework:spring-webmvc MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.dactiv.showcase:dactiv-base-curd 1.1.0.release -...

at.researchstudio.sat:won-facets (>=0.2, <=0.3), at.researchstudio.sat:won-facets-tx (>=0.2, <=0.3) +664 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.3.8.release)

org.springframework:spring-webmvc MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.researchstudio.sat:won-facets =0.2, =0.2, =0.2.7, =0.0.1-release, =0.0.3, =0.0.1,...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-security (1.1.0.release) +134 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.0.3.release)

org.springframework:spring-webmvc MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release -...