CVE-2016-9878

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5

published December 29, 2016

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05748 · 93.0th percentile
Published
2016-12-29T09:02Z
EPSS history
Timeline
  • 29 DEC 09:02Z
    An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5
    cvelistv5