MGASA-2014-0155

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2014-0155.html

Import Source

https://advisories.mageia.org/MGASA-2014-0155.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2014-0155

Related

Published

2014-04-03T01:07:29Z

Modified

2014-04-03T01:07:20Z

Summary

Updated springframework packages fix multiple vulnerabilities

Details

Updated springframework packages fix security vulnerabilities:

Jaxb2RootElementHttpMessageConverter in Spring MVC processes external XML entities (CVE-2014-0054).

Spring MVC introduces a cross-site scripting vulnerability if the action on a Spring form is not specified (CVE-2014-1904).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.4-2.2.mga4

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.1-21.3.mga3

{
    "section": "core"
}