Security
فارسی
All products

Red Hat JBoss Fuse 6/springframework

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398 · GHSA-8WX2-9Q48-VM9R org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860 · GHSA-7PHW-CXX7-Q9VQ org.springframework:spring-webmvcorg.springframework:spring MavenRed Hat Critical Fix reported
Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework MavenRed Hat Medium Fix reported
Log entry injection in Spring FrameworkCVE-2021-22060 · GHSA-6GF2-PVQW-37PH org.springframework:spring-coreRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Spring Framework Cross Site Tracing (XST)CVE-2018-11039 · GHSA-9GCM-F4X3-8JPW org.springframework:spring-webRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Denial of Service in Spring FrameworkCVE-2018-15756 · GHSA-FFVQ-7W96-97P7 org.springframework:spring-coreRed Hat JBoss BRMS 5/springframework MavenRed Hat High Fix reported
Authorization bypass in Spring SecurityCVE-2022-22978 · GHSA-HH32-7344-CG2F org.springframework.security:spring-security-coreorg.springframework.security:spring-security-web MavenRed Hat Critical Fix reported
Improper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096 · GHSA-RFMP-97JJ-H8M6 org.springframework:spring-coreorg.springframework:spring MavenRed Hat Medium Fix reported
Integer overflow in BCrypt class in Spring SecurityCVE-2022-22976 · GHSA-WX54-3278-M5G4 org.springframework.security:spring-security-coreRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported
Improper handling of case sensitivity in Spring FrameworkCVE-2022-22968 · GHSA-G5MM-VMX4-3RG7 org.springframework:spring-contextLogging Subsystem for Red Hat OpenShift/springframework MavenRed Hat High Fix reported
Moderate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040 · GHSA-F26X-PR96-VW86 org.springframework:spring-coreRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFluxCVE-2020-5397 · GHSA-7PM4-G2QJ-J85X org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Denial of service in Spring FrameworkCVE-2022-22970 · GHSA-HH26-6XWR-GGV7 org.springframework:spring-beansRed Hat Decision Manager 7/springframework MavenRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971 · GHSA-RQPH-VQWM-22VC org.springframework:spring-messagingRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported
Improper Input Validation in Spring FrameworkCVE-2020-5421 · GHSA-RV39-3QH7-9V7W org.springframework:spring-framework-bomRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported