{"action":"Upgrade org.springframework:spring-oxm to 3.2.4.RELEASE or later.","affected":[{"fixed":"3.2.4.RELEASE","introduced":"0"}],"component":"org.springframework:spring-oxm","cve_ids":["CVE-2013-4152"],"ecosystem":"Maven","epss":0.25634,"exploited":false,"fixed_versions":["3.2.4.RELEASE"],"ghsa_id":"GHSA-rp4p-g69r-438x","id":"tcs_01M5N9C5C39WB231WMKF66733F","modified_at":"2024-12-04T05:36:18.302839Z","published_at":"2022-05-13T01:02:38Z","references":["https://osv.dev/vulnerability/GHSA-rp4p-g69r-438x","https://nvd.nist.gov/vuln/detail/CVE-2013-4152","https://github.com/spring-projects/spring-framework/pull/317/files","https://github.com/spring-projects/spring-framework/commit/434735fbf6e7f9051af2ef027657edb99120b173","https://github.com/spring-projects/spring-framework/commit/7576274874deeccb6da6b09a8d5bd62e8b5538b7","http://rhn.redhat.com/errata/RHSA-2014-0212.html","http://rhn.redhat.com/errata/RHSA-2014-0245.html","http://rhn.redhat.com/errata/RHSA-2014-0254.html","http://rhn.redhat.com/errata/RHSA-2014-0400.html","http://seclists.org/bugtraq/2013/Aug/154","http://seclists.org/fulldisclosure/2013/Nov/14","http://www.debian.org/security/2014/dsa-2842","http://www.gopivotal.com/security/cve-2013-4152"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rp4p-g69r-438x","url":"https://osv.dev/vulnerability/GHSA-rp4p-g69r-438x"}],"summary":"Cross-Site Request Forgery in Spring Framework"}