{"action":"Upgrade org.springframework.security:spring-security-core to 4.1.5 (4.1.x), 4.2.4 (4.2.x) or 5.0.1 (5.0.x) or later.","affected":[{"fixed":"4.2.4","introduced":"4.2.0"},{"fixed":"5.0.1","introduced":"5.0.0"},{"fixed":"4.1.5","introduced":"4.1.0"}],"component":"org.springframework.security:spring-security-core","cve_ids":["CVE-2018-1199"],"ecosystem":"Maven","epss":0.02917,"exploited":false,"fixed_versions":["4.2.4","5.0.1","4.1.5"],"ghsa_id":"GHSA-v596-fwhq-8x48","id":"tcs_01M5N9D9F9NVDCQNF35DCSPZ87","modified_at":"2024-03-15T16:11:19.988461Z","published_at":"2018-10-17T20:01:54Z","references":["https://osv.dev/vulnerability/GHSA-v596-fwhq-8x48","https://nvd.nist.gov/vuln/detail/CVE-2018-1199","https://github.com/spring-projects/spring-framework/commit/554662ebab87af97ba25d0c9f5449c7acda8df9c","https://github.com/spring-projects/spring-framework/commit/73a81f98d40eb6f5faa91aceb868db53fae2a94b","https://github.com/spring-projects/spring-framework/commit/e6e6b8f4adcad99d133de97fcfac5ae5dd14153c","https://github.com/spring-projects/spring-security/commit/0eef5b4b425ab42b9fa0fde1a3f36a37b92558f","https://github.com/spring-projects/spring-security/commit/65da28e4bf62f58fb130ba727cbbd621b44a36d","https://github.com/spring-projects/spring-security/commit/cb8041ba67635edafcc934498ef82707157fd22","https://access.redhat.com/errata/RHSA-2018:2405","https://github.com/advisories/GHSA-v596-fwhq-8x48","https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe@%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c@%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369@%3Cissues.activemq.apache.org%3E","https://pivotal.io/security/cve-2018-1199","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-v596-fwhq-8x48","url":"https://osv.dev/vulnerability/GHSA-v596-fwhq-8x48"}],"summary":"Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core"}