Uploaded image for project: 'Spring Web Flow'
  1. Spring Web Flow
  2. SWF-1700

CVE-2017-4971: Avoid use of SpEL parser for empty value expressions

    Details

      Description

      This ticket is for fixing CVE-2017-4971.

        Attachments

          Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. SWF-1711 CVE-2017-8039: Validate data binding expression in AbstractMvcView

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

            Activity

              People

              • Assignee:
                rstoya05-aop Rossen Stoyanchev
                Reporter:
                rstoya05-aop Rossen Stoyanchev
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: