GHSA-whpp-xv3h-rwxf
Spring Web Services: SSRF via unvalidated WS-Addressing reply destinations
Quick fix
GHSA-whpp-xv3h-rwxf — org.springframework.ws:spring-ws-core: upgrade to the fixed version with the command below.
# pom.xml: bump <version>5.0.2</version> for org.springframework.ws:spring-ws-coreDetails
When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to.
Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.
Are you affected?
Enter the version of the package you're using.
Affected packages
5.0.0 Fixed in: 5.0.2 # pom.xml: bump <version>5.0.2</version> for org.springframework.ws:spring-ws-core 4.1.0 Fixed in: 4.1.4 # pom.xml: bump <version>4.1.4</version> for org.springframework.ws:spring-ws-core 4.0.0 No fixed version published yet for org.springframework.ws:spring-ws-core (maven). Pin to a known-safe version or switch to an alternative.
3.1.0 No fixed version published yet for org.springframework.ws:spring-ws-core (maven). Pin to a known-safe version or switch to an alternative.