Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Pivotal Spring Framework 4.3.18, 5.0.7 Clear all filters
TI-2018-07828 CVE-2018-11040 · GHSA-f26x-pr96-vw86

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older…

Priority MEDIUM 45

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpRespons…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0318 Published 2018-06-25 Partial fix · 5.0.7, 4.3.18 +2 CWE-829
TI-2018-07827 CVE-2018-11039 · GHSA-9gcm-f4x3-8jpw

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and…

Priority LOW 38

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the Hid…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02769 Published 2018-06-25 Partial fix · 5.0.7, 4.3.18