{"action":"Upgrade org.springframework:spring-webmvc to 3.2.12 (3.2.x), 4.0.8 (4.0.x) or 4.1.2 (4.1.x) or later.","affected":[{"fixed":"3.2.12","introduced":"3.0.4"},{"fixed":"4.0.8","introduced":"4.0.0"},{"fixed":"4.1.2","introduced":"4.1.0"}],"component":"org.springframework:spring-webmvc","cve_ids":["CVE-2014-3625"],"ecosystem":"Maven","epss":0.09928,"exploited":false,"fixed_versions":["3.2.12","4.0.8","4.1.2"],"ghsa_id":"GHSA-hhm4-hwq6-3c6w","id":"tcs_01M5N90S7Y4HS3JJ3X3Z41S4D1","modified_at":"2024-12-03T06:07:56.532259Z","published_at":"2022-05-13T01:02:39Z","references":["https://osv.dev/vulnerability/GHSA-hhm4-hwq6-3c6w","https://nvd.nist.gov/vuln/detail/CVE-2014-3625","https://github.com/spring-projects/spring-framework/commit/161d3e3049f129e211f68a4e94b544e0f0d8384d","https://github.com/spring-projects/spring-framework/commit/3f68cd633f03370d33c2603a6496e81273782601","https://github.com/spring-projects/spring-framework/commit/9beae9ae4226c45cd428035dae81214439324676","https://github.com/spring-projects/spring-framework/commit/9cef8e3001ddd61c734281a7556efd84b6cc2755","https://github.com/spring-projects/spring-framework","https://jira.spring.io/browse/SPR-12354","https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html","http://rhn.redhat.com/errata/RHSA-2015-0236.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html","http://www.pivotal.io/security/cve-2014-3625"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hhm4-hwq6-3c6w","url":"https://osv.dev/vulnerability/GHSA-hhm4-hwq6-3c6w"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in Spring Framework"}