{"action":"Upgrade org.springframework:spring-core to 4.3.15 (4.x) or 5.0.5 (5.x) or later.","affected":[{"fixed":"5.0.5","introduced":"5.0.0"},{"fixed":"4.3.15","introduced":"0"}],"component":"org.springframework:spring-core","cve_ids":["CVE-2018-1271"],"ecosystem":"Maven","epss":0.30338,"exploited":false,"fixed_versions":["5.0.5","4.3.15"],"ghsa_id":"GHSA-g8hw-794c-4j9g","id":"tcs_01M5N8XRCJ59A2BGJDHKF7ATTG","modified_at":"2024-03-17T05:16:56.536994Z","published_at":"2018-10-17T20:07:03Z","references":["https://osv.dev/vulnerability/GHSA-g8hw-794c-4j9g","https://nvd.nist.gov/vuln/detail/CVE-2018-1271","https://github.com/spring-projects/spring-framework/commit/0e28bee0f155b9bf240b4bafc4646e4810cb23f8","https://github.com/spring-projects/spring-framework/commit/13356a7ee2240f740737c5c83bdccdacc30603ab","https://github.com/spring-projects/spring-framework/commit/695bf2961feffd35b5560ccc982a2189dcca611f","https://github.com/spring-projects/spring-framework/commit/91b803a2310344d925e5d4b1709bbcea90375548","https://github.com/spring-projects/spring-framework/commit/98ad23bef8e2e04143f8f5b201380543a8d8c0c3","https://github.com/spring-projects/spring-framework/commit/b9ebdaaf3710db473a2e1fec8641c316483a22aa","https://github.com/spring-projects/spring-framework/commit/f046a066eceefa0799d1bc89bd6e1318f39bdf69","https://github.com/spring-projects/spring-framework/commit/f59ea610dfcf55cd0b42f6dd76a9b3dab0218aaa","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://pivotal.io/security/cve-2018-1271","https://github.com/advisories/GHSA-g8hw-794c-4j9g","https://access.redhat.com/errata/RHSA-2018:2939","https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2018:1320","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103699"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-g8hw-794c-4j9g","url":"https://osv.dev/vulnerability/GHSA-g8hw-794c-4j9g"}],"summary":"Path Traversal in org.springframework:spring-core"}