CVE-2011-2730
1 advisory.
Maven/org.springframework:spring-core CVE-2011-2730: high, EPSS 11.78%
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
Action: Upgrade org.springframework:spring-core to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.6 | - |
| 0 | 2.5.6.SEC03 | - |
| 2.5.7.SR0 | 2.5.7.SR023 | - |
Fixed versions
| 3.0.6 | 2.5.6.SEC03 | 2.5.7.SR023 |
Sources
- osv: GHSA-wv88-pf73-x22p
- https://nvd.nist.gov/vuln/detail/CVE-2011-2730
- https://github.com/spring-projects/spring-framework/commit/62ccc8dd7e645fb91705d44919abac838cb5ca3f
- https://github.com/spring-projects/spring-framework/commit/9772eb8410e37cd0bdec0d1b133218446c778beb
- https://github.com/spring-projects/spring-framework/commit/b8d86330d1fadc645630416c3aaebf131bf749fc
- https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit
- https://github.com/spring-projects/spring-framework
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814
- http://rhn.redhat.com/errata/RHSA-2013-0191.html
- http://rhn.redhat.com/errata/RHSA-2013-0192.html
- http://rhn.redhat.com/errata/RHSA-2013-0194.html
- http://rhn.redhat.com/errata/RHSA-2013-0195.html
- http://rhn.redhat.com/errata/RHSA-2013-0196.html
- http://rhn.redhat.com/errata/RHSA-2013-0198.html
- http://rhn.redhat.com/errata/RHSA-2013-0221.html
- http://rhn.redhat.com/errata/RHSA-2013-0533.html
- http://www.debian.org/security/2012/dsa-2504
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
CVE-2011-2730 · published · modified · JSON