Debian/libspring-java: high 7.5
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through
Action: Upgrade libspring-java to 4.3.19-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.19-1 | - |
Fixed versions
| 4.3.19-1 |
Sources
- osv: DEBIAN-CVE-2018-11040#Debian:14/libspring-java
- https://security-tracker.debian.org/tracker/CVE-2018-11040
published · modified · JSON