{"action":"Upgrade org.springframework:spring-webmvc to 3.2.8 (3.x) or 4.0.5 (4.x) or later.","affected":[{"fixed":"4.0.5","introduced":"4.0.0"},{"fixed":"3.2.8","introduced":"3.0.0"}],"component":"org.springframework:spring-webmvc","cve_ids":["CVE-2014-0225"],"ecosystem":"Maven","epss":0.01462,"exploited":false,"fixed_versions":["4.0.5","3.2.8"],"ghsa_id":"GHSA-f93f-g33r-8pcp","id":"tcs_01M5N8VHZTARFYZTBCMFPVE88M","modified_at":"2024-02-28T00:16:16.860335Z","published_at":"2022-05-13T01:02:39Z","references":["https://osv.dev/vulnerability/GHSA-f93f-g33r-8pcp","https://nvd.nist.gov/vuln/detail/CVE-2014-0225","https://github.com/spring-projects/spring-framework/commit/44ee51a6c9c3734b3fcf9a20817117e86047d753","https://github.com/spring-projects/spring-framework/commit/8e096aeef55287dc829484996c9330cf755891a1","https://github.com/spring-projects/spring-framework/commit/c6503ebbf7c9e21ff022c58706dbac5417b2b5eb","https://jira.spring.io/browse/SPR-11768","https://pivotal.io/security/cve-2014-0225"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-f93f-g33r-8pcp","url":"https://osv.dev/vulnerability/GHSA-f93f-g33r-8pcp"}],"summary":"Improper Restriction of XML External Entity Reference in Spring Framework"}