CVE-2014-3625
Pivotal Software Spring Framework < 3.1.4 - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.
Exploits (2)
References (5)
Scores
EPSS
0.1736
EPSS Percentile
95.1%
Details
CWE
CWE-22
Status
published
Products (3)
org.springframework/spring-webmvc
3.0.4 - 3.2.12Maven
pivotal_software/spring_framework
3.1.0 - 3.1.4
vmware/spring_framework
3.0.4 - 3.0.7
Published
Nov 20, 2014
Tracked Since
Feb 18, 2026