Project

General

Profile

Actions

Bug #72

closed

Feature #65: Security Audit

[Security Audit ] 7- Framework Obsolete Version in usage

Added by Kalyan Battula about 1 year ago. Updated 9 months ago.

Status:
Closed
Priority:
High
Assignee:
-
Category:
-
Target version:
Start date:
17/04/2024
Due date:
% Done:

0%

Estimated time:
Deployed In:
Category:

Description

7 Framework Obsolete Version in usage
CWE : CWE-1035
Description :
It is observed that java spring boot older version in usage.
Affected Path(s) :
/(Webserver)
Impact :
Known type of vulnerabilities exists in the application due to the usage of lower version.
Recommendation :
It is recommended to upgrade to the latest stable and secure version of springframework.
Evidence/Proof Of Concept :
Step 1: Outdated Spring boot Framework version is being used in the application.

Step 2: It is found that 2.5.4 version life support is ended on May 10, 2023.


Files

clipboard-202404171540-osci3.png (26.2 KB) clipboard-202404171540-osci3.png Kalyan Battula, 17/04/2024 03:40 PM
clipboard-202404171541-ptpc4.png (88.9 KB) clipboard-202404171541-ptpc4.png Kalyan Battula, 17/04/2024 03:40 PM
Actions #1

Updated by Vasudev Mamidi about 1 year ago

  • Status changed from New to Feedback
Actions #2

Updated by Vasudev Mamidi about 1 year ago

  • Status changed from Feedback to Resolved
Actions #3

Updated by Sivakanth Kesiraju about 1 year ago

  • Target version set to Sprint 1 (29th April - 3rd May)
Actions #4

Updated by Sivakanth Kesiraju about 1 year ago

  • Target version changed from Sprint 1 (29th April - 3rd May) to Security Audit
Actions #5

Updated by Gautam Kumar 9 months ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF