Medium severity · published Aug 27, 2026
CVE-2026-47883
Spring Framework Open Redirect in UrlHandlerFilter
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Spring Framework · Spring
7.0.0 through 7.0.8; 6.2.0 through 6.2.19 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-47883
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-47883
Vendor Advisory
https://spring.io/security/cve-2026-47883
More from Spring Framework
9.8
CVE-2026-59313
Server Sent Event stream corruption in Spring MVC functional web framework
9.8
CVE-2026-47892
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
9.8
CVE-2026-47891
Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
9.8
CVE-2026-47890
Spring Framework Server Sent Event stream corruption while rendering fragments
9.8
CVE-2026-47884
Spring Framework Improper Path Limitation in XsltView