Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-47883

Spring Framework Open Redirect in UrlHandlerFilter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Spring Framework

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.8affected
  • 6.2.0 to ≤ 6.2.19affected

References