Debian/libspring-java: medium 5.4
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers t
Action: Upgrade libspring-java to 3.0.6.RELEASE-11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.6.RELEASE-11 | - |
Fixed versions
| 3.0.6.RELEASE-11 |
Sources
published · modified · JSON