Spring Framework JDK 9+ Remote Code Execution Vulnerability

Server Sent Event stream corruption in Spring MVC functional web framework

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

Spring Framework Server Sent Event stream corruption while rendering fragments

Spring Framework Improper Path Limitation in XsltView

Spring Framework Unsafe Deserialization via Jackson JMS Converters

Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a…

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a…

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack

Spring Framework Safety Guard Bypass via SpEL Expression Compilation

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the…

Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary…

Spring Framework Denial of Service via Unbounded List Growth in Data Binding

Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse

Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions

Spring Framework maxPartSize Ignored in PartEventHttpMessageReader

Spring Framework Denial of Service via Unbounded Cache in SpEL

Spring Framework Algorithmic Denial of Service via SpEL Expressions

Spring Framework Denial of Service via Integer Overflow in SpEL Expressions

Spring Framework Denial of Service via AntPathMatcher

Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Spring Framework Predictable Session ID in WebSocket Module

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern…

RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

DoS Attack via Range Requests

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON…

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers…

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5

Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation

Spring Framework Server-Side Request Forgery via UriComponentsBuilder

Spring Framework DoS with Multipart Temp Files in WebFlux

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a…

In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially…

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack…

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of…

RFD Protection Bypass via jsessionid

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a…

Spring Framework Cross-site Scripting via EscapedErrors

Spring Framework Open Redirect in UrlFileNameViewController

Spring Framework Open Redirect in UrlHandlerFilter

Spring Framework Cross-site Scripting via JSP Form Tags