netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-vpr3-f594-mg5g

Browse Source
This commit is contained in:
advisory-database[bot]
2024-03-14 21:29:34 +00:00
parent ea11a65a05
commit e46590692e
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json
+10 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vpr3-f594-mg5g",
"modified": "2022-06-17T22:33:40Z",
"modified": "2024-03-14T21:28:08Z",
"published": "2022-05-17T03:28:34Z",
"aliases": [
"CVE-2010-1622"
],
"summary": "Improper Control of Generation of Code ('Code Injection') in Spring Framework",
"details": "SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.",
"details": "SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing `class.classLoader.URLs[0]=jar:` followed by a URL of a crafted .jar file.",
"severity": [
],
@@ -62,6 +62,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1622"
},
{
"type": "WEB",
"url": "https://github.com/spring-projects/spring-framework/commit/3a5af35d37c79d0644d49b93f792a4c18fe8eb71"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2011:0175"
@@ -74,6 +78,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=606706"
},
{
"type": "PACKAGE",
"url": "https://github.com/spring-projects/spring-framework"
},
{
"type": "WEB",
"url": "https://seclists.org/fulldisclosure/2010/Jun/456"