CVE-2014-3625 Security Details

CVE ID

CVE-2014-3625

CWE

CWE-22

CVE Description

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.

Published

Mar 28, 2017

CVSS Score & Severity

5.0Medium

CVSS Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Score

16.987%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

pivotal.ioPROJECT