Maven/org.springframework:spring-webflux CVE-2020-5397: medium 5.3, EPSS 2.55%
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
Action: Upgrade org.springframework:spring-webflux to 5.2.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.2.3 | - |
Fixed versions
| 5.2.3 |
Sources
- osv: GHSA-7pm4-g2qj-j85x#Maven/org.springframework:spring-webflux
- https://nvd.nist.gov/vuln/detail/CVE-2020-5397
- https://github.com/spring-projects/spring-framework/commit/bc7d01048579430b4b2df668178809b63d3f1929
- https://github.com/spring-projects/spring-framework
- https://pivotal.io/security/cve-2020-5397
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
CVE-2020-5397 · published · modified · JSON