Linux Distros Unpatched Vulnerability : CVE-2013-6429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which...

org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +7 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.5)

org.springframework:spring-web MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

com.discursive.taglib.reference:reference-taglib (1.0.1), com.exadel.flamingo.maven.plugin:flamingoapp (>=1.0.0, <=1.5.0) +22 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.7)

org.springframework:spring-web MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.discursive.taglib.reference:reference-taglib 1.0.1 - com.exadel.flamingo.maven.plugin:flamingoa...

cn.fastoo:fastoo-java-api (20171130), com.github.lynzabo.codegen:codegen-test (1.0-release) +47 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.4)

org.springframework:spring-web MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.fastoo:fastoo-java-api 20171130 - com.github.lynzabo.codegen:codegen-test 1.0-release -...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2) +2164 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (>=3.0.0.release, <=3.2.4.release)

org.springframework:spring-web MAVEN version =3.0.0.release, =0.0.20, =1.0.0-alpha-1, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2, =1.2, =1.0.0, =1.0.0, =1.1.0, =3.3.0, =1.0.0, =1.0.2 and more Source cves: CVE-2013-6429 Source advisory: GHSA-G6HF-F9CQ-Q7W7...

com.amashchenko.struts2.actionflow:struts2-actionflow-showcase (>=2.1.0, <=2.3.0), com.github.downgoon:jresty-rest (0.0.1) +802 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.6)

org.springframework:spring-web MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.amashchenko.struts2.actionflow:struts2-actionflow-showcase =2.1.0, =1.0.1, =0.1.0, =0.1.4,...

com.bekk.boss:maven-jetty-pluto-embedded (1.0), com.google.code.struts2webflow:struts2webflow-parent (1.0.4) +11 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.1)

org.springframework:spring-web MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded 1.0 - com.google.code.struts2webflow:struts2webflow-parent...

org.apache.cocoon:cocoon-ajax-impl (1.0.0-m3), org.apache.cocoon:cocoon-apples-impl (1.0.0-rc1) +76 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.5)

org.springframework:spring-web MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.cocoon:cocoon-ajax-impl 1.0.0-m3 - org.apache.cocoon:cocoon-apples-impl 1.0.0-rc1 -...

net.sourceforge.openutils:openutils-bshd5 (0.1), net.sourceforge.openutils:openutils-deployment (0.1) +14 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.6)

org.springframework:spring-web MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.1 - net.sourceforge.openutils:openutils-deployment 0.1 ...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +67 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.1)

org.springframework:spring-web MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.2.1, =0.7, =1.3, =1.4, =1.4, =1.5.2,...

com.bekk.boss:maven-jetty-pluto-embedded (1.0.1), de.eonas.portal:opencmsportal (>=8.5.1.1, <=10.5.1.9) +32 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.2)

org.springframework:spring-web MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded 1.0.1 - de.eonas.portal:opencmsportal =8.5.1.1, =8.5.1.1,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0, <=2.8) +1391 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.6.sec03)

org.springframework:spring-web MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0, =1.0, =0.0.1, =0.1.1,...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +18 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.8)

org.springframework:spring-web MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.3, =2.0.11, =5.0.3, =5.0.5 and more Source cves:...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2) +2164 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (>=3.0.0.release, <=3.2.4.release)

org.springframework:spring-web MAVEN version =3.0.0.release, =0.0.20, =1.0.0-alpha-1, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2, =1.2, =1.0.0, =1.0.0, =1.1.0, =3.3.0, =1.0.0, =1.0.2 and more Source cves: CVE-2013-6429 Source advisory: OSV:GHSA-G6HF-F9CQ-Q7W7...

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1094 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5)

org.springframework:spring-web MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...

net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0-m5)

org.springframework:spring-web MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2013-6429 Source advisory:...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), edu.usc.ir:lucene-geo-gazetteer (0.2) +117 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.5)

org.springframework:spring-web MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =1.0.15, =1.0.15, =1.0.15, =0.4.0, =1.4.0, =1.4.0,...

com.evasion:client (>=1.0.0.1, <=1.0.0.3), org.grails:grails-webflow (>=2.2.0.rc1, <=2.2.5) +12 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.6.sec01)

org.springframework:spring-web MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.evasion:client =1.0.0.1, =2.2.0.rc1, =2.0.2, =1.0.0.release, =2.0.8.release,...