org.springframework:spring-webmvc vulnerabilities (Maven)
27 vulnerabilities.
-
org.springframework:spring-webmvcMaven Spring Framework Improper Path Limitation in XsltView 9.8 Critical -
org.springframework:spring-webmvcMaven Spring Framework Server Sent Event stream corruption while rendering fragments 9.8 Critical -
org.springframework:spring-webmvcMaven Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux 5.3 Medium -
org.springframework:spring-webmvcMaven Spring Framework Cross-site Scripting via JSP Form Tags 5.9 Medium -
org.springframework:spring-webmvcMaven Spring Framework Cross-site Scripting via JavaScriptUtils 7.1 High -
org.springframework:spring-webmvcMaven Spring Framework Open Redirect in Spring MVC and WebFlux 4.2 Medium -
org.springframework:spring-webmvcMaven Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-webmvcMaven Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux 7.5 High -
org.springframework:spring-webmvcMaven Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-webmvcMaven CVE-2026-22745 : Denial of service in static resource handling on Windows platforms 5.3 Medium -
org.springframework:spring-webmvcMaven Static resource cache poisoning in Spring MVC and WebFlux 3.1 Low -
org.springframework:spring-webmvcMaven Spring Framework Improper Path Limitation with Script View Templates 5.9 Medium -
org.springframework:spring-webmvcMaven Server Sent Event stream corruption 2.6 Low -
org.springframework:spring-webmvcMaven CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers 5.9 Medium -
org.springframework:spring-webmvcMaven Spring Framework Path Traversal vulnerability 7.5 High -
org.springframework:spring-webmvcMaven CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter 5.3 Medium -
org.springframework:spring-webmvcMaven CVE-2024-38816: Path traversal vulnerability in functional web frameworks 7.5 High -
org.springframework:spring-webmvcMaven Spring Framework server Web Observations DoS Vulnerability 5.3 Medium -
org.springframework:spring-webmvcMaven Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch 7.5 High -
org.springframework:spring-webmvcMaven Remote Code Execution in Spring Framework 9.8 Critical -
org.springframework:spring-webmvcMaven CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux 5.3 Medium -
org.springframework:spring-webmvcMaven RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application 8.0 High -
org.springframework:spring-webmvcMaven Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized 7.5 High -
org.springframework:spring-webmvcMaven Improper Restriction of XML External Entity Reference in Spring Framework 8.8 High -
org.springframework:spring-webmvcMaven Improper Limitation of a Pathname to a Restricted Directory in Spring Framework 5.0 Medium -
org.springframework:spring-webmvcMaven Cross-Site Request Forgery in Spring Framework 6.8 Medium -
org.springframework:spring-webmvcMaven Improper Neutralization of Input During Web Page Generation in Spring Framework 4.3 Medium