Maven/org.springframework.social:spring-social-core CVE-2015-5258: high 8.8
springframework-social Cross-Site Request Forgery vulnerability
Action: Upgrade org.springframework.social:spring-social-core to 1.1.3.RELEASE or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.3.RELEASE | - |
Fixed versions
| 1.1.3.RELEASE |
Sources
- osv: GHSA-w5r6-gx3q-hmxj
- https://nvd.nist.gov/vuln/detail/CVE-2015-5258
- https://bugzilla.redhat.com/show_bug.cgi?id=1305443
- https://github.com/spring-projects/spring-social
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177420.html
CVE-2015-5258 · published · modified · JSON