CVE-2023-34036
1 advisory.
Maven/org.springframework.hateoas:spring-hateoas CVE-2023-34036: medium 5.3
Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax
Action: Upgrade org.springframework.hateoas:spring-hateoas to 1.5.5 (1.5.x), 2.0.5 (2.0.x) or 2.1.1 (2.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.5 | - |
| 2.0.0 | 2.0.5 | - |
| 2.1.0 | 2.1.1 | - |
Fixed versions
| 1.5.5 | 2.0.5 | 2.1.1 |
Sources
- osv: GHSA-7m5c-fgwf-mwph
- https://nvd.nist.gov/vuln/detail/CVE-2023-34036
- https://github.com/spring-projects/spring-hateoas
- https://spring.io/security/cve-2023-34036
CVE-2023-34036 · published · modified · JSON