CVE-2016-9878
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 6, 2024
- Reserved
- Dec 6, 2016
Description
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5n/a |
|
References
- 1040698vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://security.netapp.com/advisory/ntap-20180419-0002/
- https://pivotal.io/security/cve-2016-9878
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- 95072vdb-entry
- RHSA-2017:3115vendor-advisory
- [debian-lts-announce] 20190713 [SECURITY] [DLA 1853-1] libspring-java security updatemailing-list
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.