CVE-2016-9878

Description

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

4.927

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc 3.2.18	Windows
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc 4.2.9	Windows
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc 4.3.5	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.4.2	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.3.5	Windows
Multiple Vulnerabilities are affected in IBM Security Verify Directory Integrator 7.2.0	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.0.4	Windows
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc for Linux 3.2.18	Linux
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc for Linux 4.2.9	Linux
Vulnerabilities CVE-2016-9878 are fixed in Spring-webmvc for Linux 4.3.5	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234