2 matches found
Debian: Security Advisory (DSA-2504-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
7.5CVSS6.1AI score0.11779EPSS
SaveExploits1References3
Debian DSA-2504-1 : libspring-2.5-java - information disclosure
It was discovered that the Spring Framework contains an information disclosure vulnerability in the processing of certain Expression Language EL patterns, allowing attackers to access sensitive information using HTTP requests. NOTE: This update adds a springJspExpressionSupport context parameter...
7.5CVSS6.5AI score0.11779EPSS
SaveExploits1References4
20