org.springframework:spring-webmvc vulnerabilities (TuxCare)
90 vulnerabilities.
org.springframework:spring-webmvcTuxCareCVE-2024-38808: Spring Expression DoS Vulnerability4.3 Mediumorg.springframework:spring-webmvcTuxCareCVE-2024-22262: Spring Framework URL Parsing with Host Validation8.1 Highorg.springframework:spring-webmvcTuxCareCVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)8.1 Highorg.springframework:spring-webmvcTuxCareCVE-2024-22243: Spring Framework URL Parsing with Host Validation8.1 Highorg.springframework:spring-webmvcTuxCareSpring Framework vulnerable to denial of service6.5 Mediumorg.springframework:spring-webmvcTuxCareSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch7.5 Highorg.springframework:spring-webmvcTuxCareSpring Framework vulnerable to denial of service via specially crafted SpEL expression6.5 Mediumorg.springframework:spring-webmvcTuxCareAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumorg.springframework:spring-webmvcTuxCareDenial of service in Spring Framework5.3 Mediumorg.springframework:spring-webmvcTuxCareImproper handling of case sensitivity in Spring Framework5.3 Mediumorg.springframework:spring-webmvcTuxCareAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumorg.springframework:spring-webmvcTuxCareRemote Code Execution in Spring Framework9.8 Criticalorg.springframework:spring-webmvcTuxCareLog entry injection in Spring Framework4.3 Mediumorg.springframework:spring-webmvcTuxCareImproper Output Neutralization for Logs in Spring Framework4.3 Mediumorg.springframework:spring-webmvcTuxCareImproper Privilege Management in Spring Framework7.8 Highorg.springframework:spring-webmvcTuxCareRFD Protection Bypass via jsessionid8.7 Highorg.springframework:spring-webmvcTuxCareCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux5.3 Mediumorg.springframework:spring-webmvcTuxCareRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application8.0 Highorg.springframework:spring-webmvcTuxCareDoS Attack via Range Requests7.5 Highorg.springframework:spring-webmvcTuxCareModerate severity vulnerability that affects org.springframework:spring-core7.5 Highorg.springframework:spring-webmvcTuxCareSpring Framework Cross Site Tracing (XST)5.9 Mediumorg.springframework:spring-webmvcTuxCareSpring Framework when used in combination with any versions of Spring Security contains an authorization bypass8.8 Highorg.springframework:spring-webmvcTuxCareDenial of Service in org.springframework:spring-core6.5 Mediumorg.springframework:spring-webmvcTuxCareSpring Framework has Improperly Implemented Security Check for Standard9.8 Criticalorg.springframework:spring-webmvcTuxCarePossible privilege escalation in org.springframework:spring-core7.5 Highorg.springframework:spring-webmvcTuxCarePath Traversal in org.springframework:spring-core5.9 Mediumorg.springframework:spring-webmvcTuxCareSpring Framework allows applications to expose STOMP over WebSocket endpoints9.8 Criticalorg.springframework:spring-webmvcTuxCareSpring Security and Spring Framework may not recognize certain paths that should be protected7.5 Highorg.springframework:spring-webmvcTuxCarePivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized7.5 Highorg.springframework:spring-webmvcTuxCareFiles or Directories Accessible to External Parties in org.springframework:spring-core9.6 Criticalorg.springframework:spring-webmvcTuxCarePivotal Spring Framework DoS Attack with XML Input5.5 Mediumorg.springframework:spring-webmvcTuxCareImproper Restriction of XML External Entity Reference in Spring Framework8.8 Highorg.springframework:spring-webmvcTuxCareImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Mediumorg.springframework:spring-webmvcTuxCareImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Mediumorg.springframework:spring-webmvcTuxCareCross-Site Request Forgery in Spring Framework6.8 Mediumorg.springframework:spring-webmvcTuxCareImproper Neutralization of Input During Web Page Generation in Spring Framework4.3 Mediumorg.springframework:spring-webmvcTuxCareImproper Neutralization of Input During Web Page Generation in Spring Framework5.4 Mediumorg.springframework:spring-webmvcTuxCareCross-Site Request Forgery in Spring Framework6.8 Mediumorg.springframework:spring-webmvcTuxCareCross-Site Request Forgery in Spring Framework6.8 Mediumorg.springframework:spring-webmvcTuxCareSpring Framework and Spring Security vulnerable to Deserialization of Untrusted Data6.8 Medium