https://spring.io/component---src-templates-cve-template-tsx-dc85c84ca55675330ab2.js

1"use strict";(self.webpackChunkspring=self.webpackChunkspring||[]).push([[575],{3020:function(e,t,a){a.d(t,{f:function(){return n}});var l=a(4794),s=a(6540);const n=()=>s.createElement("div",{className:"default-banner has-background-light py-6"},s.createElement("div",{className:"extra is-hidden-mobile is-hidden-tablet-only"},s.createElement("div",{className:"extra-1"}),s.createElement("div",{className:"extra-2"},s.createElement("img",{src:"/img/extra/footer.svg",alt:""}))),s.createElement("div",{className:"content py-6 has-text-left"},s.createElement("div",{className:"container"},s.createElement("div",{className:"columns is-variable is-8"},s.createElement("article",{className:"column"},s.createElement("h2",{className:"is-size-4 has-text-weight-bold mb-2"},"Get ahead"),s.createElement("p",{id:"get-ahead-description",className:"mb-1"},"VMware offers training and certification to turbo-charge your progress."),s.createElement("a",{className:"is-link link-animate",href:"https://spring.academy/","aria-labelledby":"get-ahead-description"},"Learn more")),s.createElement("article",{className:"column"},s.createElement("h2",{className:"is-size-4 has-text-weight-bold mb-2"},"Get support"),s.createElement("p",{id:"support-description",className:"mb-1"},"Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription."),s.createElement(l.Link,{className:"is-link link-animate",to:"/support","aria-labelledby":"support-description"},"Learn more")),s.createElement("article",{className:"column"},s.createElement("h2",{className:"is-size-4 has-text-weight-bold mb-2",id:"upcoming-events-title"},"Upcoming events"),s.createElement("p",{className:"mb-1"},"Check out all the upcoming events in the Spring community."),s.createElement(l.Link,{"aria-labelledby":"upcoming-events-title",className:"is-link link-animate",to:"/events"},"View all"))))))},8514:function(e,t,a){var l=a(6188),s=a(982),n=a(4794),i=a(6540);t.A=()=>i.createElement("div",{className:"pt-5 pb-2 security-head"},i.createElement("h1",{className:"head-h1 is-size-4 has-text-weight-bold mr-6 mb-3"},i.createElement(n.Link,{to:"/security"},"Spring Security Advisories")),i.createElement("div",{className:"is-right"},i.createElement(n.Link,{to:"/security.atom",className:"is-link"},i.createElement(s.g,{className:"ml-1 mr-2",icon:l.zbc,style:{width:15}}),"RSS feed")))},7680:function(e,t,a){var l=a(6540),s=a(4794);t.A=()=>l.createElement("div",{className:"report links-animate has-background-light"},l.createElement("h2",{className:"is-size-4 mb-2"},"Reporting a vulnerability"),l.createElement("p",null,"To report a security vulnerability for a project within the Spring portfolio, see the ",l.createElement(s.Link,{to:"/security-policy"},"Security Policy")))},8707:function(e,t,a){a.d(t,{C2:function(){return r},cg:function(){return l},f_:function(){return i},lb:function(){return c}});const l=e=>e?e.flatMap((e=>e.fixes||[])):[],s=e=>{if(!e)return"";const t=e.split(".");return t.length>=2?`${t[0]}.${t[1]}.x`:e},n=e=>{const[t,a]=e.split(".").map(Number);return 1e3*(t||0)+(a||0)},i=(e,t)=>n(t)-n(e),r=(e,t)=>!!e&&e.some((e=>((e,t)=>{const a=n(t),l=e["last-affected"]?n(s(e["last-affected"])):null,i=e.introduced?n(s(e.introduced)):null;return!(null!==i&&a<i||null!==l&&a>l)})(e,t))),c=(e,t)=>e?e.filter((e=>((e,t)=>{const a=n(t),l=e["last-affected"]?n(s(e["last-affected"])):null,i=e.introduced?n(s(e.introduced)):l;return!(null!==i&&a<i||null!==l&&a>l)})(e,t))).flatMap((e=>e.fixes||[])):[]},535:function(e,t,a){a.r(t);var l=a(6540),s=a(3020),n=a(8696),i=a(3609),r=a(8514),c=a(7680),m=a(8707),d=a(6732);const o=e=>{var t;let{fix:a}=e;return l.createElement("tr",null,l.createElement("td",null,a.version),l.createElement("td",null,"oss"===(null===(t=a.availability)||void 0===t?void 0:t.toLowerCase())?"OSS":l.createElement("a",{href:"https://enterprise.spring.io/"},"Enterprise Support Only")))};t.default=e=>{var t,a,u,p,f;l.useEffect((()=>{(0,d.A)()}));let E=null;try{e.data.page.fields.affected&&(E=JSON.parse(e.data.page.fields.affected))}catch(w){console.error(w)}let h=null;try{e.data.page.fields.history&&(h=JSON.parse(e.data.page.fields.history))}catch(w){console.error(w)}let v=null;try{e.data.page.fields.references&&(v=JSON.parse(e.data.page.fields.references))}catch(w){console.error(w)}const g="legacy"===e.data.page.fields.format,N=g?null===(t=e.data.page.frontmatter)||void 0===t?void 0:t.t

1itle:e.data.page.fields.title,b=e.data.page.fields.project,y=(null===(a=E)||void 0===a?void 0:a.versions)||[],k=(0,m.cg)(y);return l.createElement(i.A,{className:"cve",seo:{title:N,hasNoSpring:!0}},l.createElement("div",{className:"container"},l.createElement("div",{className:"pb-5 cve-content"},l.createElement(r.A,null),l.createElement("div",{className:"columns pt-6"},l.createElement("div",{className:"column content is-8"},l.createElement("h1",{className:"is-size-3 has-text-weight-semibold"},N),l.createElement("div",{className:"meta py-4"},null!==(u=e.data.page.fields)&&void 0!==u&&u.severity?e.data.page.fields.severity.toUpperCase():""," |"," ",null!==(p=e.data.page.fields)&&void 0!==p&&p.publishedAt?e.data.page.fields.publishedAt.toUpperCase():""," |"," ",null!==(f=e.data.page.fields)&&void 0!==f&&f.slug?e.data.page.fields.slug.toUpperCase():""),g?l.createElement("div",null,l.createElement(n.v,{content:e.data.page.html,className:"markdown"})):l.createElement(l.Fragment,null,l.createElement("div",null,l.createElement("h2",{className:"is-size-4"},"Description"),l.createElement(n.v,{content:e.data.page.html,className:"markdown"})),l.createElement("div",{className:"py-3"},l.createElement("h2",{className:"is-size-4"},"Affected Spring Products and Versions"),l.createElement("p",null,b,":"),l.createElement("ul",null,y.map(((e,t)=>l.createElement("li",{key:t},e.introduced?`${e.introduced} - ${e["last-affected"]}`:`${e["last-affected"]} and earlier`))))),l.createElement("div",{className:"py-3"},l.createElement("h2",{className:"is-size-4"},"Mitigation"),k.length>0&&l.createElement(l.Fragment,null,l.createElement("div",{className:"mb-3"},"Users of affected versions should upgrade to the corresponding fixed version."),l.createElement("table",{className:"table is-fullwidth is-bordered mb-3"},l.createElement("thead",{className:"has-background-light"},l.createElement("tr",null,l.createElement("th",{className:"fw-bold"},"Fix version"),l.createElement("th",{className:"fw-bold"},"Availability"))),l.createElement("tbody",null,k.map(((e,t)=>l.createElement(o,{key:`line${t}`,fix:e})))))),e.data.mitigation?l.createElement(n.v,{content:e.data.mitigation.html,className:"markdown"}):l.createElement("p",null,"No further mitigation steps are necessary.")),e.data.credit&&l.createElement("div",{className:"py-3"},l.createElement("h2",{className:"is-size-4"},"Credit"),l.createElement(n.v,{content:e.data.credit.html,className:"markdown"})),v&&v.length>0||e.data.page.fields.cvssVector?l.createElement("div",{className:"py-3"},l.createElement("h2",{className:"is-size-4"},"References"),l.createElement("ul",null,v&&v.length>0&&v.map(((e,t)=>l.createElement("li",{key:t},l.createElement("a",{href:e},e)))),e.data.page.fields.cvssVector?l.createElement("li",null,l.createElement("a",{href:`https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=${e.data.page.fields.cvssVector}&version=${e.data.page.fields.cvssVersion||"3.1"}`},"https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=",e.data.page.fields.cvssVector,"&version=",e.data.page.fields.cvssVersion||"3.1")):null)):null,l.createElement("div",{className:"py-3"},l.createElement("h2",{className:"is-size-4"},"History"),l.createElement("ul",null,e.data.page.fields.publishedAtRaw&&l.createElement("li",null,e.data.page.fields.publishedAtRaw,": Initial vulnerability report published."),h&&h.length>0&&h.map(((e,t)=>l.createElement("li",{key:t},e.date,": ",e.action))))))),l.createElement("div",{className:"column is-4"},l.createElement(c.A,null))))),l.createElement(s.f,null))}}}]);
2//# sourceMappingURL=component---src-templates-cve-template-tsx-dc85c84ca55675330ab2.js.map