spring_framework vulnerabilities

1 known vulnerability in spring_framework from Spring by VMware Tanzu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Spring: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-38816Sep 13, 2024SpringEPSS 21.3%

  Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the pr