{"action":"Upgrade org.springframework:spring-web to 3.2.5.RELEASE or later.","affected":[{"fixed":"3.2.5.RELEASE","introduced":"0"}],"component":"org.springframework:spring-web","cve_ids":["CVE-2013-6429"],"ecosystem":"Maven","epss":0.9056,"exploited":false,"fixed_versions":["3.2.5.RELEASE"],"ghsa_id":"GHSA-g6hf-f9cq-q7w7","id":"tcs_01M5N8XHV523WBJ83Y7WGBKE8T","modified_at":"2024-12-04T05:41:42.939748Z","published_at":"2022-05-13T01:02:39Z","references":["https://osv.dev/vulnerability/GHSA-g6hf-f9cq-q7w7","https://nvd.nist.gov/vuln/detail/CVE-2013-6429","https://github.com/spring-projects/spring-framework/issues/15704","https://github.com/spring-projects/spring-framework/commit/2ae6a6a3415eebc57babcb9d3e5505887eda6d8","https://github.com/spring-projects/spring-framework/commit/7387cb990e35b0f1b573faf29d4f9ae183d7a5e","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","https://jira.spring.io/browse/SPR-11078?redirect=false","http://rhn.redhat.com/errata/RHSA-2014-0400.html","http://secunia.com/advisories/57915"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g6hf-f9cq-q7w7","url":"https://osv.dev/vulnerability/GHSA-g6hf-f9cq-q7w7"}],"summary":"Cross-Site Request Forgery in Spring Framework"}