Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized
High severity
GitHub Reviewed
Published
Oct 4, 2018
to the GitHub Advisory Database
•
Updated Mar 5, 2024
Package
Affected versions
< 3.2.18
>= 4.2.0, < 4.2.9
>= 4.3.0, < 4.3.5
Patched versions
3.2.18
4.2.9
4.3.5
Description
Published by the National Vulnerability Database
Dec 29, 2016
Published to the GitHub Advisory Database
Oct 4, 2018
Reviewed
Jun 16, 2020
Last updated
Mar 5, 2024
Credits
-
sunSUNQ Analyst
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
References