{"action":"Upgrade org.springframework:spring-webmvc to 3.2.8 (3.x) or 4.0.2 (4.x) or later.","affected":[{"fixed":"3.2.8","introduced":"0"},{"fixed":"4.0.2","introduced":"4.0.0"}],"component":"org.springframework:spring-webmvc","cve_ids":["CVE-2014-0054"],"ecosystem":"Maven","epss":0.91354,"exploited":false,"fixed_versions":["3.2.8","4.0.2"],"ghsa_id":"GHSA-8cmm-qj8g-fcp6","id":"tcs_01M5N8MFW055E9FRVMQB37ZJ5M","modified_at":"2024-12-04T05:38:04.547455Z","published_at":"2022-05-13T01:02:38Z","references":["https://osv.dev/vulnerability/GHSA-8cmm-qj8g-fcp6","https://nvd.nist.gov/vuln/detail/CVE-2014-0054","https://github.com/spring-projects/spring-framework/issues/16003","https://github.com/spring-projects/spring-framework/commit/1a8629d40825c073b6863ae2ab748b647b28506a","https://github.com/spring-projects/spring-framework/commit/1c5cab2a4069ec3239c531d741aeb07a434f521b","https://github.com/spring-projects/spring-framework/commit/edba32b3093703d5e9ed42b5b8ec23ecc1998398","https://github.com/spring-projects/spring-framework/commit/fb0683c066e74e9667d6cd8c5fa01f674c68c3be","http://rhn.redhat.com/errata/RHSA-2014-0400.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8cmm-qj8g-fcp6","url":"https://osv.dev/vulnerability/GHSA-8cmm-qj8g-fcp6"}],"summary":"Cross-Site Request Forgery in Spring Framework"}