Spring by Pivotal Spring Framework
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-1274 | Versions 1.13 to 1.13.10, 2.0 to 2.0.5 | Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability ca | HIGH 7.5 | 1.9 % | ||
| CVE-2018-1275 | Versions prior to 5.0.5 and 4.3.16 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose | CRITICAL 9.8 | 57 % | ||
| CVE-2018-1273 | Versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit | CRITICAL 9.8 | 97 % | KEV | |
| CVE-2018-1272 | Versions prior to 5.0.5 and 4.3.15 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support f | HIGH 7.5 | 3.1 % | ||
| CVE-2018-1271 | Versions prior to 5.0.5 and 4.3.15 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configu | MEDIUM 5.9 | 30 % | ||
| CVE-2018-1270 | Versions prior to 5.0.5 and 4.3.15 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose | CRITICAL 9.8 | 77 % |