ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1099 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.7.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =0.4.2, =1.0-b1 and more Source cves: CVE-2014-1904 Source advisory: GHSA-FF7P-JQJM-V66H...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1099 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.7.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =0.4.2, =1.0-b1 and more Source cves: CVE-2014-1904 Source advisory: OSV:GHSA-FF7P-JQJM-V66H...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), ch.ralscha:extdirectspring (1.4.0) +75 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=4.0.0.release, <=4.0.1.release)

org.springframework:spring-webmvc MAVEN version =4.0.0.release, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-1904 Source advisory: GHSA-FF7P-JQJM-V66H...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), ch.ralscha:extdirectspring (1.4.0) +75 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=4.0.0.release, <=4.0.1.release)

org.springframework:spring-webmvc MAVEN version =4.0.0.release, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-1904 Source advisory: OSV:GHSA-FF7P-JQJM-V66H...

Mageia: Security Advisory (MGASA-2014-0155)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2890-1 : libspring-java - security update

Two vulnerabilities were discovered in libspring-java, the Debian package for the Java Spring framework. - CVE-2014-0054 Jaxb2RootElementHttpMessageConverter in Spring MVC processes external XML entities. - CVE-2014-1904 Spring MVC introduces a cross-site scripting vulnerability if the action on ...

[SECURITY] [DSA 2890-1] libspring-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2890-1 [email protected] http://www.debian.org/security/ Florian Weimer March 29, 2014 http://www.debian.org/security/faq -...

DSA-2890-1 libspring-java - security update

Bulletin has no description...

Debian Security Advisory DSA 2890-1 (libspring-java - security update)

Two vulnerabilities were discovered in libspring-java, the Debian package for the Java Spring framework. CVE-2014-0054 Jaxb2RootElementHttpMessageConverter in Spring MVC processes external XML entities. CVE-2014-1904 Spring MVC introduces a cross-site scripting vulnerability if the action on a...

Debian: Security Advisory (DSA-2890-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1099 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.7.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =0.4.2, =1.0-b1 and more Source cves: CVE-2014-1904 Source advisory: MEND:CVE-2014-1904...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), ch.ralscha:extdirectspring (1.4.0) +75 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=4.0.0.release, <=4.0.1.release)

org.springframework:spring-webmvc MAVEN version =4.0.0.release, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-1904 Source advisory: MEND:CVE-2014-1904...

CVE-2014-1904

The CVE-2014-1904 entry is an XSS in Spring Framework’s Spring MVC FormTag: FormTag.java improperly handles user-supplied URIs in a default action, enabling remote script/HTML injection. Affected versions are Spring Framework 3.0.0 up to 3.2.7 (and 3.0.0–3.2.7 inclusive) and 4.0.0 up to 4.0.1 (4....