org.springframework:spring-framework-bom vulnerabilities (TuxCare)
57 vulnerabilities.
-
org.springframework:spring-framework-bomTuxCare Spring Framework response splitting in ContentDisposition 3.7 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework Safety Guard Bypass via SpEL Expression Compilation 9.1 Critical -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via Unbounded List Growth in Data Binding 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder 9.8 Critical -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Improper Path Limitation in XsltView 9.8 Critical -
org.springframework:spring-framework-bomTuxCare Spring Framework Cross-site Scripting via EscapedErrors 6.1 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Path Traversal via Backslash in SpringTemplateLoader 4.3 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints 9.8 Critical -
org.springframework:spring-framework-bomTuxCare Spring Framework Open Redirect in UrlFileNameViewController 6.1 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Unsafe Deserialization via Jackson JMS Converters 8.1 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux 5.3 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Arbitrary Method Invocation in SpEL Expressions 3.7 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via Unbounded Cache in SpEL 5.3 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Algorithmic Denial of Service via SpEL Expressions 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via Integer Overflow in SpEL Expressions 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via AntPathMatcher 3.7 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL 4.8 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Cross-site Scripting via JSP Form Tags 5.9 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Cross-site Scripting via JavaScriptUtils 7.1 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Open Redirect in Spring MVC and WebFlux 4.2 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux 7.5 High -
org.springframework:spring-framework-bomTuxCare Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Escalation via Session Fixation in WebFlux 4.2 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Predictable Session ID in WebSocket Module 4.8 Medium -
org.springframework:spring-framework-bomTuxCare CVE-2026-22745 : Denial of service in static resource handling on Windows platforms 5.3 Medium -
org.springframework:spring-framework-bomTuxCare Static resource cache poisoning in Spring MVC and WebFlux 3.1 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework DoS with Multipart Temp Files in WebFlux 6.5 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework Improper Path Limitation with Script View Templates 5.9 Medium -
org.springframework:spring-framework-bomTuxCare Server Sent Event stream corruption 2.6 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework STOMP CSRF Vulnerability 4.3 Medium -
org.springframework:spring-framework-bomTuxCare CVE-2025-41249: Spring Framework Annotation Detection Vulnerability 7.5 High -
org.springframework:spring-framework-bomTuxCare CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers 5.9 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework DataBinder Case Sensitive Match Exception 3.1 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework Path Traversal vulnerability 7.5 High -
org.springframework:spring-framework-bomTuxCare CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter 5.3 Medium -
org.springframework:spring-framework-bomTuxCare CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception 3.1 Low -
org.springframework:spring-framework-bomTuxCare Spring Framework DoS via conditional HTTP request 5.3 Medium -
org.springframework:spring-framework-bomTuxCare CVE-2024-38816: Path traversal vulnerability in functional web frameworks 7.5 High -
org.springframework:spring-framework-bomTuxCare CVE-2024-38808: Spring Expression DoS Vulnerability 4.3 Medium -
org.springframework:spring-framework-bomTuxCare CVE-2024-22262: Spring Framework URL Parsing with Host Validation 8.1 High -
org.springframework:spring-framework-bomTuxCare CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report) 8.1 High -
org.springframework:spring-framework-bomTuxCare CVE-2024-22243: Spring Framework URL Parsing with Host Validation 8.1 High -
org.springframework:spring-framework-bomTuxCare Spring Framework vulnerable to denial of service 6.5 Medium -
org.springframework:spring-framework-bomTuxCare Spring Framework vulnerable to denial of service via specially crafted SpEL expression 6.5 Medium -
org.springframework:spring-framework-bomTuxCare Allocation of Resources Without Limits or Throttling in Spring Framework 6.5 Medium -
org.springframework:spring-framework-bomTuxCare Denial of service in Spring Framework 5.3 Medium -
org.springframework:spring-framework-bomTuxCare Improper handling of case sensitivity in Spring Framework 5.3 Medium - Show olderLoading…