CVE-2014-3578: Pivotal Software Spring Framework

Medium severity, CVSS 5.0. EPSS: 6.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

Affected products

• Pivotal Software Spring Framework: from 3.2.0, before 3.2.9 (fixed in 3.2.9); from 4.0.0, before 4.0.5 (fixed in 4.0.5)

Published 2015-02-19. Last modified 2026-06-17.