Debian/libspring-java: medium 6.5
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory ST
Action: Upgrade libspring-java to 4.3.19-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.19-1 | - |
Fixed versions
| 4.3.19-1 |
Sources
- osv: DEBIAN-CVE-2018-1257#Debian:14/libspring-java
- https://security-tracker.debian.org/tracker/CVE-2018-1257
published · modified · JSON