deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-h8w2-rv57-vc6f
Package: com.splunk:splunk-otel-javaagent (MAVEN)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-502: Deserialization of Untrusted Data, CWE-1395: Dependency on Vulnerable Third-Party Component
Vulnerable versions: < 2.26.1
Patched in: 2.26.1

Summary: splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution

Details:
In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. An attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. All three of the following conditions must be true to exploit this vulnerability:
1. Splunk Distribution of OpenTelemetry Java is attached as a Java agent (`-javaagent`)
2. An RMI endpoint is network-reachable (e.g. JMX remote port, an RMI registry, or any application-exported RMI service)
3. A gadget-chain-compatible library is present on the classpath

### Impact
Arbitrary remote code execution with the privileges of the user running the instrumented JVM.

### Recommendation
Upgrade to version 2.26.1 or later.

### Workarounds
Set the following system property to disable the RMI integration:

```
-Dotel.instrumentation.rmi.enabled=false
```

### References
[Advisory in OpenTelemetry Instrumentation for Java](https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-xw7x-h9fj-p2c7)
GitHub Security Advisory: GHSA-3qwq-q9vm-5j42
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 3.1.10
Patched in: unpatched

Summary: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access

Details:
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.
GitHub Security Advisory: GHSA-3qwq-q9vm-5j42
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 4.0.0, <= 4.1.7
Patched in: unpatched

Summary: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access

Details:
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.
GitHub Security Advisory: GHSA-3qwq-q9vm-5j42
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 4.2.0, <= 4.2.4
Patched in: unpatched

Summary: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access

Details:
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.
GitHub Security Advisory: GHSA-3qwq-q9vm-5j42
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 5.0.0-M1, < 5.0.2
Patched in: 5.0.2

Summary: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access

Details:
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.
GitHub Security Advisory: GHSA-3qwq-q9vm-5j42
Package: org.springframework.cloud:spring-cloud-config-server (MAVEN)
Severity: HIGH (CVSS 8.6)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 4.3.0, < 4.3.2
Patched in: 4.3.2

Summary: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access

Details:
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.
GitHub Security Advisory: GHSA-579q-h82j-r5v2
Package: com.datadoghq:dd-java-agent (MAVEN)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 0.40.0, < 1.60.3
Patched in: 1.60.3

Summary: dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

Details:
In versions of dd-trace-java prior to 1.60.3, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. All three of the following conditions must be true to exploit this vulnerability:
1. dd-trace-java is attached as a Java agent (`-javaagent`) on Java 16 or earlier
2. A JMX/RMI port has been explicitly configured via `-Dcom.sun.management.jmxremote.port` and is network-reachable
3. A gadget-chain-compatible library is present on the classpath

### Impact
Arbitrary remote code execution with the privileges of the user running the instrumented JVM.

### Recommendation
- For JDK >= 17: No action is required, but upgrading is strongly encouraged.
- For JDK >= 8u121 < JDK 17: Upgrade to dd-trace-java version 1.60.3 or later.
- For JDK < 8u121 and earlier where serialization filters are not available, apply the workaround described below.

### Workarounds
Set the following environment variable to disable the RMI integration: `DD_INTEGRATION_RMI_ENABLED=false`

### Credits
This vulnerability was responsibly disclosed by Mohamed Amine ait Ouchebou (mrecho) (Indiesecurity) via the Datadog bug bounty program.
GitHub Security Advisory: GHSA-8g9r-9wjw-37j4
Package: org.keycloak:keycloak-services (MAVEN)
Severity: MODERATE (CVSS 4.2)
CWE: CWE-284: Improper Access Control
Vulnerable versions: <= 26.5.6
Patched in: unpatched

Summary: Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API

Details:
A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for higher-assurance sessions. Specifically, an attacker who has already obtained a victim’s password can delete the victim’s registered MFA/OTP credential without first proving possession of that factor. The attacker can then register their own MFA device, effectively taking full control of the account. This weakness undermines the intended protection provided by multi-factor authentication.
GitHub Security Advisory: GHSA-xw7x-h9fj-p2c7
Package: io.opentelemetry.javaagent:opentelemetry-javaagent (MAVEN)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: < 2.26.1
Patched in: 2.26.1

Summary: OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

Details:
In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. An attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. All three of the following conditions must be true to exploit this vulnerability:
1. OpenTelemetry Java instrumentation is attached as a Java agent (`-javaagent`)
2. An RMI endpoint is network-reachable (e.g. JMX remote port, an RMI registry, or any application-exported RMI service)
3. A gadget-chain-compatible library is present on the classpath

### Impact
Arbitrary remote code execution with the privileges of the user running the instrumented JVM.

### Recommendation
Upgrade to version 2.26.1 or later.

### Workarounds
Set the following system property to disable the RMI integration:

```
-Dotel.instrumentation.rmi.enabled=false
```

### Credits
This vulnerability was responsibly disclosed in coordination with Datadog.
GitHub Security Advisory: GHSA-mgvc-8q2h-5pgc
Package: org.springframework.boot:spring-boot-starter-actuator (MAVEN)
Severity: HIGH (CVSS 8.2)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: <= 2.7.18
Patched in: unpatched

Summary: Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

Details:
Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the path used by the CloudFoundry Actuator endpoints. This issue affects Spring Security: from 4.0.0 through 4.0.3, from 3.5.0 through 3.5.11, from 3.4.0 through 3.4.14, from 3.3.0 through 3.3.17, from 2.7.0 through 2.7.31.
GitHub Security Advisory: GHSA-mgvc-8q2h-5pgc
Package: org.springframework.boot:spring-boot-starter-actuator (MAVEN)
Severity: HIGH (CVSS 8.2)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 3.0.0, <= 3.3.13
Patched in: unpatched

Summary: Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

Details:
Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the path used by the CloudFoundry Actuator endpoints. This issue affects Spring Security: from 4.0.0 through 4.0.3, from 3.5.0 through 3.5.11, from 3.4.0 through 3.4.14, from 3.3.0 through 3.3.17, from 2.7.0 through 2.7.31.
GitHub Security Advisory: GHSA-mgvc-8q2h-5pgc
Package: org.springframework.boot:spring-boot-starter-actuator (MAVEN)
Severity: HIGH (CVSS 8.2)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 3.4.0, <= 3.4.13
Patched in: unpatched

Summary: Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

Details:
Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the path used by the CloudFoundry Actuator endpoints. This issue affects Spring Security: from 4.0.0 through 4.0.3, from 3.5.0 through 3.5.11, from 3.4.0 through 3.4.14, from 3.3.0 through 3.3.17, from 2.7.0 through 2.7.31.
GitHub Security Advisory: GHSA-mgvc-8q2h-5pgc
Package: org.springframework.boot:spring-boot-starter-actuator (MAVEN)
Severity: HIGH (CVSS 8.2)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 3.5.0, < 3.5.12
Patched in: 3.5.12

Summary: Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

Details:
Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the path used by the CloudFoundry Actuator endpoints. This issue affects Spring Security: from 4.0.0 through 4.0.3, from 3.5.0 through 3.5.11, from 3.4.0 through 3.4.14, from 3.3.0 through 3.3.17, from 2.7.0 through 2.7.31.
GitHub Security Advisory: GHSA-mgvc-8q2h-5pgc
Package: org.springframework.boot:spring-boot-starter-actuator (MAVEN)
Severity: HIGH (CVSS 8.2)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 4.0.0-M1, < 4.0.4
Patched in: 4.0.4

Summary: Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

Details:
Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under the path used by the CloudFoundry Actuator endpoints. This issue affects Spring Security: from 4.0.0 through 4.0.3, from 3.5.0 through 3.5.11, from 3.4.0 through 3.4.14, from 3.3.0 through 3.3.17, from 2.7.0 through 2.7.31.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: >= 7.0.0, < 7.0.4
Patched in: 7.0.4

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: >= 6.5.0, < 6.5.9
Patched in: 6.5.9

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: >= 6.4.0, <= 6.4.13
Patched in: unpatched

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: >= 6.0.0, <= 6.3.10
Patched in: unpatched

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: >= 5.8.0, <= 5.8.16
Patched in: unpatched

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-mf92-479x-3373
Package: org.springframework.security:spring-security-web (MAVEN)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-425: Direct Request ('Forced Browsing')
Vulnerable versions: <= 5.7.14
Patched in: unpatched

Summary: Spring Security HTTP Headers Are not Written Under Some Conditions

Details:
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. 
This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webflux (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 5.3.0, <= 5.3.39
Patched in: unpatched

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webflux (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 6.0.0, <= 6.1.21
Patched in: unpatched

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webflux (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 6.2.0, < 6.2.17
Patched in: 6.2.17

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webflux (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 7.0.0-M1, < 7.0.6
Patched in: 7.0.6

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webmvc (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 5.3.0, <= 5.3.39
Patched in: unpatched

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webmvc (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 6.0.0, <= 6.1.21
Patched in: unpatched

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webmvc (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 6.2.0, < 6.2.17
Patched in: 6.2.17

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
GitHub Security Advisory: GHSA-4773-3jfm-qmx3
Package: org.springframework:spring-webmvc (MAVEN)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 7.0.0-M1, < 7.0.6
Patched in: 7.0.6

Summary: Spring Framework Improper Path Limitation with Script View Templates

Details:
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.