https://bugzilla.redhat.com/show_bug.cgi?id=1564405
--- Comment #4 from Chess Hazlett <chazlett(a)redhat.com> ---
Upstream fix (5.0.5):
https://github.com/spring-projects/spring-framework/commit/e0de9126ed8cf2...
The fix in 4.3.15 was incomplete, and a new CVE issued: CVE-2018-1275.
--
You are receiving this mail because:
You are on the CC list for the bug.