[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzru7j_mqxEN1kvZyWhtHPQWZ55ABAfM0Su3yVeE8n_w":3,"g5a-ex:pivotal\u002Fspring_web_flow@*":69,"g5a-family:pivotal\u002Fspring_web_flow":71},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":46,"seoMetadata":47,"meta":66},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"pivotal","spring_web_flow",5,2,0,"2017-11-27",[14,17,19,21,23],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.0",false,{"version":18,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.1",{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.2",{"version":22,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.4",{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},"2.4.5",1,"Spring Web Flow by Pivotal is a technology product with 5 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31,32],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},{"version":18,"cve_count":10,"kev_count":11,"has_kev":16},{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},{"version":22,"cve_count":10,"kev_count":11,"has_kev":16},{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},[34,42],{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":16,"epssScore":41},"CVE-2017-4971","An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.","2017-06-13",5.9,"v3.0","Medium",0.14688,{"cveId":43,"description":44,"publishedDate":12,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":16,"epssScore":45},"CVE-2017-8039","An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971.",0.00963,[],{"title":48,"metaDescription":49,"keywords":50,"structuredData":51},"Spring Web Flow by Pivotal - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Spring Web Flow by Pivotal covering 5 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Spring Web Flow vulnerabilities, Spring Web Flow security, Spring Web Flow CVE, Pivotal Spring Web Flow, Spring Web Flow threat intelligence, Pivotal security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":52,"@type":53,"name":54,"description":49,"url":55,"manufacturer":56,"applicationCategory":60,"softwareVersion":61,"mainEntity":62},"https:\u002F\u002Fschema.org","SoftwareApplication","Spring Web Flow","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fpivotal\u002Fspring_web_flow",{"@type":57,"name":58,"url":59},"Organization","Pivotal","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpivotal","Security Software","5 versions tracked",{"@type":63,"name":64,"description":65,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Spring Web Flow Security Vulnerabilities","Security vulnerabilities affecting Spring Web Flow by Pivotal",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":67,"apiVersion":68},"2026-10-18T23:53:09.826Z","3.0",{"rows":70,"total":11,"capped":16,"failed":11},[],[]]