{"action":"Upgrade org.springframework:spring-oxm to 3.2.4.RELEASE or later.","affected":[{"fixed":"3.2.4.RELEASE","introduced":"0"}],"component":"org.springframework:spring-oxm","cve_ids":["CVE-2013-7315"],"ecosystem":"Maven","epss":0.05065,"exploited":false,"fixed_versions":["3.2.4.RELEASE"],"ghsa_id":"GHSA-vp63-rrcm-9mph","id":"tcs_01M5N9EERB48BP04WAH9M3B7NZ","modified_at":"2024-12-04T05:33:04.792695Z","published_at":"2022-05-13T01:02:38Z","references":["https://osv.dev/vulnerability/GHSA-vp63-rrcm-9mph","https://nvd.nist.gov/vuln/detail/CVE-2013-7315","https://github.com/spring-projects/spring-framework/issues/15432","https://github.com/spring-projects/spring-framework/commit/434735fbf6e7f9051af2ef027657edb99120b173","https://github.com/spring-projects/spring-framework/commit/7576274874deeccb6da6b09a8d5bd62e8b5538b7","https://jira.spring.io/browse/SPR-10806?redirect=false","http://seclists.org/bugtraq/2013/Aug/154","http://seclists.org/fulldisclosure/2013/Nov/14","http://www.debian.org/security/2014/dsa-2842","http://www.securityfocus.com/bid/77998"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vp63-rrcm-9mph","url":"https://osv.dev/vulnerability/GHSA-vp63-rrcm-9mph"}],"summary":"Missing XML Validation in Spring Framework"}