{"id":"CVE-2015-5211","published":"2017-05-25T17:00:00Z","modified":"2024-08-06T06:41:08Z","title":"Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported…","vendor":null,"product":null,"tier":"tail","description":{"text":"Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02558,"percentile":0.85061,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/","tags":["x_refsource_MISC"]},{"url":"https://pivotal.io/security/cve-2015-5211","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":17.0,"factors":[{"name":"EPSS percentile","points":17.01}]},"affected":[{"ecosystem":"Maven","package":"org.springframework:spring-core","vulnerableRanges":[">=4.2.0, <4.2.2",">=4.0.0, <4.1.8","<3.2.15"],"patched":["4.2.2","4.1.8","3.2.15"],"from":["GHSA-pgf9-h69p-pcgf"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0652","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-spring-framework-cve-2015-5211","children":[{"from":"CVE-2015-5211","to":"CVE-2020-5421","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"…- 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","from":"CVE.org","in":"CVE-2020-5421"}]},{"from":"CVE-2015-5211","to":"CVE-2018-11040","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["spring-web/src/main/java/org/springframework/http/converter/json/MappingJackson2HttpMessageConverter.java","spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/AbstractJsonpResponseBodyAdvice.java","spring-webmvc/src/main/java/org/springframework/web/servlet/view/json/MappingJackson2JsonView.java","spring-websocket/src/main/java/org/springframework/web/socket/sockjs/transport/handler/JsonpPollingTransportHandler.java"],"commits":["https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3","https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543","https://github.com/spring-projects/spring-framework/commit/874859493bbda59739c38c7e52eb3625f247b93a","https://github.com/spring-projects/spring-framework/commit/b80c13b722bb207ddf43f53a007ee3ddc1dd2e26"],"basis":"shared function","functions":["MappingJackson2JsonView","getJsonpParameterValue","writePrefix"]}]},{"from":"CVE-2015-5211","to":"CVE-2024-38820","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["spring-web/src/main/java/org/springframework/web/accept/ContentNegotiationManagerFactoryBean.java","spring-web/src/main/java/org/springframework/web/accept/PathExtensionContentNegotiationStrategy.java","spring-web/src/main/java/org/springframework/web/util/UrlPathHelper.java","spring-webmvc/src/main/java/org/springframework/web/servlet/mvc/method/annotation/AbstractMessageConverterMethodProcessor.java"],"commits":["https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3","https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543","https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c"],"basis":"shared function","functions":["getMediaTypeKey"]}]}],"packageHistory":[{"cve":"CVE-2011-2894","published":"2011-10-04","fixed":"3.0.6","kev":false},{"cve":"CVE-2014-3578","published":"2015-02-19","fixed":"4.0.5","kev":false},{"cve":"CVE-2015-0201","published":"2015-03-10","fixed":"4.1.5","kev":false},{"cve":"CVE-2015-5211","published":"2017-05-25","fixed":"4.2.2","kev":false},{"cve":"CVE-2016-5007","published":"2017-05-25","fixed":"4.3.1","kev":false,"link":{"from":"CVE-2015-5211","to":"CVE-2016-5007","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.springframework:spring-core","fromFixed":"4.2.2","toFixed":"4.3.1","daysApart":0}]}},{"cve":"CVE-2018-1199","published":"2018-03-16","fixed":"5.0.3","kev":false},{"cve":"CVE-2018-1271","published":"2018-04-06","fixed":"5.0.5","kev":false}],"package":"Maven:org.springframework:spring-core"}}