Debian/libspring-java: medium 5.9
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including
Action: Upgrade libspring-java to 4.3.19-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.19-1 | - |
Fixed versions
| 4.3.19-1 |
Sources
- osv: DEBIAN-CVE-2018-11039#Debian:14/libspring-java
- https://security-tracker.debian.org/tracker/CVE-2018-11039
published · modified · JSON