Reject CVE-2016-1000027 #5949
Closed
Reject CVE-2016-1000027 #5949
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
As explained in spring-projects/spring-framework#24434, this CVE has been reported through a now disbanded CNA and is invalid. A similar issue has been reported with CVE-2011-2894, which got closed with documentation updates. This is not a vulnerability in Spring Framework, but rather a well-known security concern in all Java applications. This commit rejects this CVE as a duplicate of CVE-2011-2894 as a result.
|
bclozel is not recognized currently as an account participating in the Git Pilot. To ensure timely processing of your pull request, please contact the CVE Team using either the CVE Request web form (https://cveform.mitre.org/) or an email (cve@mitre.org) and confirm your identity. |
|
@cve-team I already reached out through the CVE Request web form on May 20th 2022, and replied to the automatic e-mail on May 30th 2022. |
|
Hello @bclozel, This is not the correct forum for this request. Your web form submission is under review. I will close this PR to reduce duplicate work. Thanks, |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
As explained in spring-projects/spring-framework#24434, this CVE has
been reported through a now disbanded CNA and is invalid.
A similar issue has been reported with CVE-2011-2894, which got closed
with documentation updates. This is not a vulnerability in Spring
Framework, but rather a well-known security concern in all Java
applications.
This commit rejects this CVE as a duplicate of CVE-2011-2894 as a
result.