ai.ost:fastjson-protobuf (>=0.1.1, <=1.0.0), ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1) +2373 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.0.15.release)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =0.1.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =0.0.2, =0.0.3, =2.0.3.release, =2.0.2.release, =1.0.3.release, =2.0.0, =1.0.0, =1.0.0, =0.0.8-alpha, =0.0.17-alpha and more Source cves:...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), au.org.consumerdatastandards:data-holder (>=1.0.0, <=1.12.0) +1443 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.2.0.release, <=5.2.2.release)

org.springframework:spring-webmvc MAVEN version =5.2.0.release, =1.1.1, =1.0.0, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.1, =0.0.3 - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks 4.1.0 and...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +3813 more potentially affected by CVE-2020-5398 via org.springframework:spring-webmvc (>=5.1.0.release, <=5.1.12.release)

org.springframework:spring-webmvc MAVEN version =5.1.0.release, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-5398 Source...

Denial of service

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

CVE-2018-15756

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

CVE-2018-15756 DoS Attack via Range Requests

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

CVE-2018-15756

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

CVE-2018-15756: Undefined Security Weakness

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

PT-2018-2762

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch Description The issue is related to the implementation of the ResourceHttpRequestHandler class in...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

org.acegisecurity:acegi-security-cas (>=1.0.5, <=1.0.7), org.acegisecurity:acegi-security-samples-contacts (1.0.7) +4 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.9)

org.springframework:spring-web MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security-cas =1.0.5, =1.0.7 -...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +5 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.5.2)

org.springframework:spring-web MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

DoS Attack via Range Requests

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler , or starting in 5.0 when an annotated controll...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +1400 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.3.0.release, <=4.3.4.release)

org.springframework:spring-webmvc MAVEN version =4.3.0.release, =1, =1, =1, =1, =1, =0.1, =1.0.0-rc, =1.6, =1.6, =1.7.0, =0.0.26, =0.0.26, =0.9.5 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...

at.chrl:chrl-orm-spring-integration (1.1.0), au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18) +1406 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=4.2.0.release, <=4.2.8.release)

org.springframework:spring-webmvc MAVEN version =4.2.0.release, =3.4.0, =3.5.4-rc.0, =1, =1.4, =1.4, =1.0.4, =0.0.10, =1.6.0, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.22 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +1296 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=3.0.0.release, <=3.2.17.release)

org.springframework:spring-webmvc MAVEN version =3.0.0.release, =0.0.20, =0.3.3, =0.1.0, =1.0.0, =0.2, =3.0.1, =1.0.0-release, =3.0.10, =3.0.10, =4.2.1, =4.2.1, =4.2.1, =4.2.15 and more Source cves: CVE-2016-9878 Source advisory: GHSA-2M8H-FGR8-2Q9W...