Upstream information

CVE-2010-1622 at MITRE

Description

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

SUSE information

Overall state of this security issue: Does not affect SUSE products

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

SUSE Timeline for this CVE

CVE page created: Tue Jul 9 17:04:50 2013
CVE page last modified: Tue Jul 1 12:17:09 2025