CVE-2014-3578 Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

What is CVE-2014-3578?

CVE-2014-3578 is a medium-severity path traversal vulnerability in n/a, published on 19 Feb 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

Weakness: CWE-22

Which versions are affected by CVE-2014-3578?

4 open source packages ship an affected version, including org.springframework:spring-core. It affects 1 product.

Products include Pivotal Software Spring Framework.

How do I fix CVE-2014-3578?

Upgrade org.springframework:spring-core to a fixed version for your release line: 3.2.9 or 4.0.5.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2014-3578 being exploited?

There is no known exploitation of CVE-2014-3578 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2014-0225 Improper Restriction of XML External Entity Reference in Spring Framework High 8.8
• CVE-2016-5007 Spring Security and Spring Framework may not recognize certain paths that should be protected High 7.5
• CVE-2016-9878 Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized High 7.5
• CVE-2013-6429 Cross-Site Request Forgery in Spring Framework Medium 6.8
• CVE-2013-6430 Improper Neutralization of Input During Web Page Generation in Spring Framework Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2014-3578, GHSA-rhcg-rwhx-qj3j, UBUNTU-CVE-2014-3578.