[SWF-1711] CVE-2017-8039: Validate data binding expression in AbstractMvcView Created: 15/Sep/17  Updated: 15/Sep/17  Resolved: 15/Sep/17

Status: Resolved
Project: Spring Web Flow
Component/s: Core: View Selection Rendering
Affects Version/s: 2.4.5
Fix Version/s: 2.4.6, 2.5.RC1

Type: Improvement Priority: Minor
Reporter: Rossen Stoyanchev Assignee: Rossen Stoyanchev
Resolution: Complete Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
relates to SWF-1700 CVE-2017-4971: Avoid use of SpEL pars... Resolved


Ticket for https://pivotal.io/security/cve-2017-8039.

Generated at Wed Jul 17 22:33:56 UTC 2019 using JIRA 7.9.2#79002-sha1:3bb15b68ecd99a30eb364c4c1a393359bcad6278.