4 matches found
Debian Security Advisory DSA 2504-1 (libspring-2.5-java)
The remote host is missing an update to libspring-2.5-java announced via advisory DSA 2504-1. OpenVAS Vulnerability Test $Id: deb25041.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2504-1 libspring-2.5-java Authors: Thomas Reinke Copyright: Copyright c 20...
Debian: Security Advisory (DSA-2504-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2504-1 : libspring-2.5-java - information disclosure
It was discovered that the Spring Framework contains an information disclosure vulnerability in the processing of certain Expression Language EL patterns, allowing attackers to access sensitive information using HTTP requests. NOTE: This update adds a springJspExpressionSupport context parameter...
[SECURITY] [DSA 2504-1] libspring-2.5-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2504-1 [email protected] http://www.debian.org/security/ Florian Weimer June 28, 2012 http://www.debian.org/security/faq -...