Spring Framework Path Traversal Vulnerability

Using Jenkins Ask a question
1

Hi, Our server is reporting spring vulnerability in Jenkins(v2.452.4) on below paths

%C/jenkins/war/WEB-INF/lib/spring-web-5.3.29.jar

Do we have higher version of Spring Framework Jar in higher LTS of Jenkins? If not ,Are we planning to upgrade Spring jars to higher version?

2

yes latest LTS is on spring 6.x and requires Java 17