Beveiligingsadvies

CVE-2015-3192

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-07-12 19:00:00

Laatst bijgewerkt 2024-08-06 05:39:31

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.

← Alle CVE's bekijken Bekijk op cve.org ↗