CVE-2015-3192

Medium

Advisory

Published 17 Oct 2018In the index since 8 Sept 2026

Pivotal Spring Framework DoS Attack with XML Input

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
spring-webmaven	2.5.6.SEC03, 4.1.1.RELEASE	3.2.14, 4.1.7	2

2 by stars

Chart

Latest

Affected images

Radar Score

jenkinsjenkins-x

1 of the 2 container images this version deploys carry CVE-2015-3192.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	spring-web@2.5.6.SEC03	3.2.14

10,682

1 of the 18 container images this version deploys carry CVE-2015-3192.

Container image	Digest	Package	Fixed in
craigwillis/c2metadata-bd :latest	ae317d7e4724	spring-web@4.1.1.RELEASE	4.1.7

55,726

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
craigwillis/c2metadata-bd :latest	ae317d7e4724	spring-web@4.1.1.RELEASE	4.1.7	1
jenkinsci/jenkins :2.67	a1f33f004659	spring-web@2.5.6.SEC03	3.2.14	1