N/A

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response.

N/A

N/A

Pivotal Spring Framework 安全漏洞

Pivotal Spring Framework是美国Pivotal Software公司的一套开源的Java、Java EE应用程序框架。该框架可帮助开发人员构建高质量的应用。 Pivotal Spring Framework中存在安全漏洞。攻击者可利用该漏洞实施反射文件下载攻击。以下版本受到影响：Spring Framework 4.2.0版本至4.2.1版本，4.0.0版本至4.1.7版本，3.2.0版本至3.2.14版本，更早的已不再支持的版本。

N/A

N/A