{"action":"Upgrade org.springframework.security:spring-security-core to 4.1.1 or later.","affected":[{"fixed":"4.1.1","introduced":"0"}],"component":"org.springframework.security:spring-security-core","cve_ids":["CVE-2016-5007"],"ecosystem":"Maven","epss":0.02802,"exploited":false,"fixed_versions":["4.1.1"],"ghsa_id":"GHSA-8crv-49fr-2h6j","id":"tcs_01M5N8MGG6R34VKRVME1BTF50M","modified_at":"2024-12-02T05:54:00.856162Z","published_at":"2018-10-17T20:30:12Z","references":["https://osv.dev/vulnerability/GHSA-8crv-49fr-2h6j","https://nvd.nist.gov/vuln/detail/CVE-2016-5007","https://github.com/spring-projects/spring-security/issues/3964","https://github.com/spring-projects/spring-framework/commit/a30ab30e4e9ae021fdda04e9abfc228476b846b5","https://github.com/spring-projects/spring-security/commit/e4c13e3c0ee7f06f59d3b43ca6734215ad7d8974","https://github.com/advisories/GHSA-8crv-49fr-2h6j","https://pivotal.io/security/cve-2016-5007","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.securityfocus.com/bid/91687"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8crv-49fr-2h6j#Maven/org.springframework.security:spring-security-core","url":"https://osv.dev/vulnerability/GHSA-8crv-49fr-2h6j"}],"summary":"Spring Security and Spring Framework may not recognize certain paths that should be protected"}