spring_framework vulnerabilities

1 known vulnerability in spring_framework from Pivotal Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Spring Framework: URL Redirection to Untrusted Site

  CVE-2024-22243Feb 23, 2024SpringEPSS 3.97%

  Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html att