DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
VMware Tanzu Spring Framework: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-20
Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, offene Weiterleitungen durchzuführen, Daten zu manipulieren oder Denial-of-Service-Zustände zu verursachen.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-59314US | low3.7 | — | ||
Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name.
Spring Framewo… | ||||
| CVE-2026-59283US | — | — | ||
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler… | ||||
| CVE-2026-59282US | — | — | ||
Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS… | ||||
| CVE-2026-59281US | — | — | ||
Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors()… | ||||
| CVE-2026-59280US | — | — | ||
Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and Fre… | ||||
| CVE-2026-47893US | — | — | ||
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason.
Spring Framew… | ||||
| CVE-2026-47892US | —OT erhöht | — | ||
A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request.
Spring Framework 7.0.0… | ||||
| CVE-2026-47891US | — | — | ||
A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.
Spring Framework 7.0.0 - 7.0.8
Spring F… | ||||
| CVE-2026-47890US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2… | ||||
| CVE-2026-47889US | — | — | ||
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.… | ||||
| CVE-2026-47888US | — | — | ||
A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28… | ||||
| CVE-2026-47887US | — | — | ||
A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect.
Spring Fra… | ||||
| CVE-2026-47886US | — | — | ||
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used wit… | ||||
| CVE-2026-47885US | — | — | ||
The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6… | ||||
| CVE-2026-47884US | — | Exploit | ||
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not… | ||||
| CVE-2026-47883US | — | Exploit | ||
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring W… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Spring Security Advisory CVE-2026-47883 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47884 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47885 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47886 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47887 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47888 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47889 vom 2026-08-20external
- Spring Security Advisory CVE-2026-47890 vom 2026-08-20external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan