{"action":"Upgrade org.springframework:spring-core to 3.2.9 (3.x) or 4.0.5 (4.x) or later.","affected":[{"fixed":"3.2.9","introduced":"3.0.0"},{"fixed":"4.0.5","introduced":"4.0.0"}],"component":"org.springframework:spring-core","cve_ids":["CVE-2014-3578"],"ecosystem":"Maven","epss":0.06386,"exploited":false,"fixed_versions":["3.2.9","4.0.5"],"ghsa_id":"GHSA-rhcg-rwhx-qj3j","id":"tcs_01M5N9BWKJ31EV36QQKWRJHNTA","modified_at":"2024-12-06T05:39:46.036030Z","published_at":"2022-05-14T00:56:29Z","references":["https://osv.dev/vulnerability/GHSA-rhcg-rwhx-qj3j","https://nvd.nist.gov/vuln/detail/CVE-2014-3578","https://github.com/spring-projects/spring-framework/issues/16414","https://github.com/spring-projects/spring-framework/commit/748167bfa33c3c69db2d8dbdc3a0e9da692da3a0","https://github.com/spring-projects/spring-framework/commit/8ee465103850a3dca018273fe5952e40d5c45a66","https://github.com/spring-projects/spring-framework/commit/f6fddeb6eb7da625fd711ab371ff16512f431e8d","https://bugzilla.redhat.com/show_bug.cgi?id=1131882","https://github.com/spring-projects/spring-framework","https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html","https://rhn.redhat.com/errata/RHSA-2015-0234.html","https://rhn.redhat.com/errata/RHSA-2015-0235.html","http://jvn.jp/en/jp/JVN49154900/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2014-000054","http://pivotal.io/security/cve-2014-3578","http://rhn.redhat.com/errata/RHSA-2015-0720.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rhcg-rwhx-qj3j","url":"https://osv.dev/vulnerability/GHSA-rhcg-rwhx-qj3j"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in Spring Framework"}