Spring by VMware Tanzu vulnerabilities
We track 3 vulnerabilities in Spring by VMware Tanzu products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2024.
Latest Spring by VMware Tanzu vulnerabilities
- 7.5 High severity
Spring: Improper Limitation of a Pathname to a Restricted Directory
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the pr
- 8.2 High severity
In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an…
In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the fo
- 8.8 High severity
Spring Cloud Skipper: Unrestricted Upload of File with Dangerous Type
Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user