springframework: Reflected File Download (RFD) attack
| Package(s): | springframework |
CVE #(s): | CVE-2015-5211
|
| Created: | November 2, 2015 |
Updated: | November 5, 2015 |
| Description: |
From the Red Hat bugzilla:
Under some situations, the Spring Framework is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response. |
| Alerts: |
|
