{"action":"Upgrade org.springframework:spring-core to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"3.0.6","introduced":"3.0.0"},{"fixed":"2.5.6.SEC03","introduced":"0"},{"fixed":"2.5.7.SR023","introduced":"2.5.7.SR0"}],"component":"org.springframework:spring-core","cve_ids":["CVE-2011-2730"],"ecosystem":"Maven","epss":0.11779,"exploited":false,"fixed_versions":["3.0.6","2.5.6.SEC03","2.5.7.SR023"],"ghsa_id":"GHSA-wv88-pf73-x22p","id":"tcs_01M5N9H6AF3125977EERWVHV6A","modified_at":"2024-12-05T05:34:13.113550Z","published_at":"2022-05-17T02:16:01Z","references":["https://osv.dev/vulnerability/GHSA-wv88-pf73-x22p","https://nvd.nist.gov/vuln/detail/CVE-2011-2730","https://github.com/spring-projects/spring-framework/commit/62ccc8dd7e645fb91705d44919abac838cb5ca3f","https://github.com/spring-projects/spring-framework/commit/9772eb8410e37cd0bdec0d1b133218446c778beb","https://github.com/spring-projects/spring-framework/commit/b8d86330d1fadc645630416c3aaebf131bf749fc","https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit","https://github.com/spring-projects/spring-framework","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814","http://rhn.redhat.com/errata/RHSA-2013-0191.html","http://rhn.redhat.com/errata/RHSA-2013-0192.html","http://rhn.redhat.com/errata/RHSA-2013-0194.html","http://rhn.redhat.com/errata/RHSA-2013-0195.html","http://rhn.redhat.com/errata/RHSA-2013-0196.html","http://rhn.redhat.com/errata/RHSA-2013-0198.html","http://rhn.redhat.com/errata/RHSA-2013-0221.html","http://rhn.redhat.com/errata/RHSA-2013-0533.html","http://www.debian.org/security/2012/dsa-2504","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-wv88-pf73-x22p","url":"https://osv.dev/vulnerability/GHSA-wv88-pf73-x22p"}],"summary":"Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework"}