org.springframework:spring-context-support vulnerabilities (TuxCare)
76 vulnerabilities.
org.springframework:spring-context-supportTuxCareCVE-2024-38808: Spring Expression DoS Vulnerability4.3 Mediumorg.springframework:spring-context-supportTuxCareCVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)8.1 Highorg.springframework:spring-context-supportTuxCareCVE-2024-22243: Spring Framework URL Parsing with Host Validation8.1 Highorg.springframework:spring-context-supportTuxCareSpring Framework vulnerable to denial of service6.5 Mediumorg.springframework:spring-context-supportTuxCareSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch7.5 Highorg.springframework:spring-context-supportTuxCareSpring Framework vulnerable to denial of service via specially crafted SpEL expression6.5 Mediumorg.springframework:spring-context-supportTuxCareAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumorg.springframework:spring-context-supportTuxCareDenial of service in Spring Framework5.3 Mediumorg.springframework:spring-context-supportTuxCareImproper handling of case sensitivity in Spring Framework5.3 Mediumorg.springframework:spring-context-supportTuxCareAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumorg.springframework:spring-context-supportTuxCareRemote Code Execution in Spring Framework9.8 Criticalorg.springframework:spring-context-supportTuxCareLog entry injection in Spring Framework4.3 Mediumorg.springframework:spring-context-supportTuxCareImproper Output Neutralization for Logs in Spring Framework4.3 Mediumorg.springframework:spring-context-supportTuxCareImproper Privilege Management in Spring Framework7.8 Highorg.springframework:spring-context-supportTuxCareRFD Protection Bypass via jsessionid8.7 Highorg.springframework:spring-context-supportTuxCareRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application8.0 Highorg.springframework:spring-context-supportTuxCareDoS Attack via Range Requests7.5 Highorg.springframework:spring-context-supportTuxCareModerate severity vulnerability that affects org.springframework:spring-core7.5 Highorg.springframework:spring-context-supportTuxCareSpring Framework Cross Site Tracing (XST)5.9 Mediumorg.springframework:spring-context-supportTuxCareDenial of Service in org.springframework:spring-core6.5 Mediumorg.springframework:spring-context-supportTuxCareSpring Framework has Improperly Implemented Security Check for Standard9.8 Criticalorg.springframework:spring-context-supportTuxCarePossible privilege escalation in org.springframework:spring-core7.5 Highorg.springframework:spring-context-supportTuxCarePath Traversal in org.springframework:spring-core5.9 Mediumorg.springframework:spring-context-supportTuxCareSpring Framework allows applications to expose STOMP over WebSocket endpoints9.8 Criticalorg.springframework:spring-context-supportTuxCareSpring Security and Spring Framework may not recognize certain paths that should be protected7.5 Highorg.springframework:spring-context-supportTuxCareImproper Neutralization of Input During Web Page Generation in Spring Framework5.4 Medium