Pivotal Software vulnerabilities
We track 3 vulnerabilities in Pivotal Software products across 3 products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on March 18, 2024.
Latest Pivotal Software vulnerabilities
- 8.2 High severity
Spring Security: Missing Authorization
In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the Aut
- 8.1 High severity
Spring Framework: URL Redirection to Untrusted Site
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html att
- 9.8 Critical severity
VMware Tanzu Spring Data Commons Property Binder Exploited
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supp