CVE-2014-0054
1 advisory.
Maven/org.springframework:spring-webmvc CVE-2014-0054: medium
Cross-Site Request Forgery in Spring Framework
Action: Upgrade org.springframework:spring-webmvc to 3.2.8 (3.x) or 4.0.2 (4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.8 | - |
| 4.0.0 | 4.0.2 | - |
Fixed versions
| 3.2.8 | 4.0.2 |
Sources
- osv: GHSA-8cmm-qj8g-fcp6
- https://nvd.nist.gov/vuln/detail/CVE-2014-0054
- https://github.com/spring-projects/spring-framework/issues/16003
- https://github.com/spring-projects/spring-framework/commit/1a8629d40825c073b6863ae2ab748b647b28506a
- https://github.com/spring-projects/spring-framework/commit/1c5cab2a4069ec3239c531d741aeb07a434f521b
- https://github.com/spring-projects/spring-framework/commit/edba32b3093703d5e9ed42b5b8ec23ecc1998398
- https://github.com/spring-projects/spring-framework/commit/fb0683c066e74e9667d6cd8c5fa01f674c68c3be
- http://rhn.redhat.com/errata/RHSA-2014-0400.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
CVE-2014-0054 · published · modified · JSON