{"action":"Upgrade org.springframework:spring-web to 3.2.2.RELEASE or later.","affected":[{"fixed":"3.2.2.RELEASE","introduced":"0"}],"component":"org.springframework:spring-web","cve_ids":["CVE-2013-6430"],"ecosystem":"Maven","epss":0.01774,"exploited":false,"fixed_versions":["3.2.2.RELEASE"],"ghsa_id":"GHSA-xjrf-8x4f-43h4","id":"tcs_01M5N9JGCK2Q2HXEATQZ1KJF33","modified_at":"2025-07-03T20:36:14.698961Z","published_at":"2022-05-05T00:29:18Z","references":["https://osv.dev/vulnerability/GHSA-xjrf-8x4f-43h4","https://nvd.nist.gov/vuln/detail/CVE-2013-6430","https://github.com/spring-projects/spring-framework/issues/14617","https://github.com/spring-projects/spring-framework/commit/7a7df6637478607bef0277bf52a4e0a03e20a248","https://github.com/spring-projects/spring-framework/commit/9982b4c01a8c7be0961e58b58ed83731c40449ff","https://github.com/spring-projects/spring-framework/commit/f5c9fe69a444607af667911bd4c5074b5b073e7b","https://github.com/spring-projects/spring-framework","https://jira.spring.io/browse/SPR-9983?redirect=false","https://spring.io/security/cve-2013-6430"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-xjrf-8x4f-43h4","url":"https://osv.dev/vulnerability/GHSA-xjrf-8x4f-43h4"}],"summary":"Improper Neutralization of Input During Web Page Generation in Spring Framework"}