Description
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.
Remediation
References
http://rhn.redhat.com/errata/RHSA-2015-0236.html
http://rhn.redhat.com/errata/RHSA-2015-0720.html
http://www.pivotal.io/security/cve-2014-3625
https://jira.spring.io/browse/SPR-12354
https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
Related Vulnerabilities
CVE-2017-3202 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer
CVE-2022-25852 Vulnerability in npm package libpq
CVE-2012-0394 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2018-8041 Vulnerability in maven package org.apache.camel:camel-mail
CVE-2022-45685 Vulnerability in maven package org.codehaus.jettison:jettison