Read the docs
Red Hat Security Advisory

RHSA-2011:0175

JBoss Web Framework Kit 1.0.0 removal

Released 2011-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 59

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: foll…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.52003 Published 2010-06-21 Fixed in 2.5.7, 3.0.3 CWE-94