GHSA-hw5c-xm3c-v96w
Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.springframework.webflow:spring-webflow | >= 4.0.0, < 4.0.1 | 4.0.1 |
| Maven | org.springframework.webflow:spring-webflow | >= 3.0.0, < 3.0.2 | 3.0.2 |
| Maven | org.springframework.webflow:spring-webflow | <= 2.5.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the user's browser if the error response from the server contains error details with input reflected from an attacker.
Affected versions:
Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.
References
External links from the advisory. They lead to third-party sites.