What is GHSA-45vg-2v73-vm62?

GHSA-45vg-2v73-vm62 is a security advisory published by GitHub Security Advisories with Medium severity. Moderate severity vulnerability that affects org.springframework:spring-core

Which CVE IDs does GHSA-45vg-2v73-vm62 cover?

GHSA-45vg-2v73-vm62 covers the following CVE IDs: CVE-2015-0201. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-45vg-2v73-vm62?

GHSA-45vg-2v73-vm62 affects 1 product, including: maven/org.springframework:spring-core:\u003e= 4.1.0, \u003c 4.1.5.

GHSA-45vg-2v73-vm62Medium

Moderate severity vulnerability that affects org.springframework:spring-core

Vendor

GitHub Security Advisories

Published

October 17, 2018

Last Modified

March 5, 2024

🔗 CVE IDs covered (1)

CVE-2015-0201 →

📋 Description

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

🎯 Affected products1

maven/org.springframework:spring-core:>= 4.1.0, < 4.1.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2015-0201
https://github.com/advisories/GHSA-45vg-2v73-vm62
https://pivotal.io/security/cve-2015-0201
https://github.com/spring-projects/spring-framework/commit/d63cfc8eebc396be009e733a81ebb4c984811f6e
https://github.com/spring-projects/spring-framework/commit/dc5b5ca8ee09c890352f89b2dae58bc0132d6545