PT-2014-3110 · Pivotal · Spring Framework

Published 2014-01-26 · Updated 2022-05-13 · CVE-2013-6429

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pivotal software spring framework (affected versions not specified) vmware spring framework (affected versions not specified)

Description The issue concerns a problem in pivotal software spring framework and vmware spring framework.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

CSRF

XXE

Weakness Enumeration

CWE-352

CWE-611

Related Identifiers

CVE-2013-6429

DSA-2857-1

GHSA-G6HF-F9CQ-Q7W7

MGASA-2014-0096

Affected Products

Spring Framework

References · 24

• https://ubuntu.com/security/CVE-2013-6429 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6429 · Security Note
• https://osv.dev/vulnerability/GHSA-g6hf-f9cq-q7w7 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0400.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-6429 · Vendor Advisory
• https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-6429 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-6429 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-6429 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0096.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0096 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-6429 · Vendor Advisory
• https://github.com/spring-projects/spring-framework/commit/2ae6a6a3415eebc57babcb9d3e5505887eda6d8 · Note
• https://github.com/spring-projects/spring-framework/issues/15704 · Note
• https://github.com/spring-projects/spring-framework/commit/7387cb990e35b0f1b573faf29d4f9ae183d7a5e · Note