CVE-2011-2730: springsource spring_framework Configuration

Modified

AliasesDSA-2504-1GHSA-wv88-pf73-x22p

Published 05-12-2012Last modified 06-08-2024

Vulnerability summary

CVE-2011-2730 is a high (CVSS 7.5) Configuration vulnerability in springsource spring_framework. EPSS estimates a 11.78% chance of exploitation in the next 30 days, higher than 96% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

11.78%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

RHSA-2013:0191 RHSA-2013:0192 RHSA-2013:0193 RHSA-2013:0195 RHSA-2013:0196 RHSA-2013:0197

Timeline

05-12-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

11.78%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 11.78% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-16ConfigurationWeaknesses in this category are typically introduced during the configuration of the software.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

libspring-2.5-java< 2.5.6.SEC02-2+squeeze1

Org.springframework1 product

spring-core≥ 3.0.0, < 3.0.6 | < 2.5.6.SEC03 | ≥ 2.5.7.SR0, < 2.5.7.SR023

Springsource1 product

spring_framework≤ 2.5.7_sr01 | ≤ 3.0.5 | 2.5.0 | 2.5.0:rc1 | 2.5.0:rc2 | 2.5.1 | 2.5.2 | 2.5.3 | 2.5.4 | 2.5.5 | 2.5.6 | 2.5.7 | 3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4

3 vendors · 3 products