[SWF-1711] CVE-2017-8039: Validate data binding expression in AbstractMvcView Created: 15/Sep/17  Updated: 15/Sep/17  Resolved: 15/Sep/17

Status: Resolved
Project: Spring Web Flow
Component/s: Core: View Selection Rendering
Affects Version/s: 2.4.5
Fix Version/s: 2.4.6, 2.5.RC1

Type: Improvement Priority: Minor
Reporter: Rossen Stoyanchev Assignee: Rossen Stoyanchev
Resolution: Complete Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
relates to SWF-1700 CVE-2017-4971: Avoid use of SpEL pars... Resolved


Ticket for https://pivotal.io/security/cve-2017-8039.

Generated at Thu Oct 01 13:53:09 UTC 2020 using Jira 8.5.4#805004-sha1:0444eab799707f9ad7b248d69f858774aadfd250.