VDB
GCVE-110-MAGEIA-2015-211
GCVE-110-MAGEIA-2015-211
Advisory Published
Updated springframework packages fix security vulnerabilities:
When processing user provided XML documents, the Spring Framework did not
disable by default the resolution of URI references in a DTD declaration. By
observing differences in response times, an attacker could then identify
valid IP addresses on the internal network with functioning web servers
(CVE-2014-0225).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | freshplayerplugin | 0.3.4-1.mga5 (unaffected), 0 (affected) | — |
| Mageia | springframework | 0 (affected), 3.1.4-2.3.mga4 (unaffected), 3.1.4-2.3.mga4 (unaffected), 0 (affected) | — |
Aliases
References
Browse GCVE Records
73,877 records in the GCVE database · Updated July 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.