Unknown · Spring Framework · CVE-2013-6430
Name of the Vulnerable Software and Affected Versions:
Spring Framework versions prior to 3.2.2
Description:
The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via specific Unicode characters, including line separator, paragraph separator, left angle bracket, or right angle bracket, due to improper escaping by the `javascriptEscape` method in `JavaScriptUtils.java`.
Recommendations:
For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue.