CVE-2015-5258 springframework-social Cross-Site Request Forgery vulnerability
HighCVSS 8.8
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.social/spring-social-core(Maven) | < 1.1.3.RELEASE | 1.1.3.RELEASE |
| org.springframework.social/spring-social-core(Maven) | = 1.0.0.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.0.1.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.0.2.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.0.3.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.1.0.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.1.1.RELEASE | No fix listed |
| org.springframework.social/spring-social-core(Maven) | = 1.1.2.RELEASE | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| VMware spring social | < 1.1.3 | 1.1.3 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- FEDORA-2016-4d0e6ba888 third-party-advisory vendor-advisory
- github.com
- github.com product