CVE-2016-9878

Name of the Vulnerable Software and Affected Versions Pivotal Spring Framework versions prior to 3.2.18 Pivotal Spring Framework versions 4.2.x prior to 4.2.9 Pivotal Spring Framework versions 4.3.x prior to 4.3.5

Description The issue allows directory traversal attacks due to insufficient sanitization of paths provided to the ResourceServlet.

Recommendations For versions prior to 3.2.18, update to version 3.2.18 or later. For versions 4.2.x prior to 4.2.9, update to version 4.2.9 or later. For versions 4.3.x prior to 4.3.5, update to version 4.3.5 or later.