CVE-2024-22243

🗓️ 23 Feb 2024 05:03:54Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 565 Views🌐 WEB

Applications using UriComponentsBuilder vulnerable to open redirect or SSRF attack

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)	1 Apr 202416:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of VMWare Tanzu Spring Framework, IBM DevOps Build is vulnerable to remote attacker to conduct phising attacks	3 Feb 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to open redirect vulnerability in VMware Tanzu Spring Framework ( CVE-2024-22243)	28 Jun 202416:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	6 Jun 202414:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities	18 Apr 202413:43	–	ibm
IBM Security Bulletins	Security Bulletin: Spring vulnerability in embedded components may affect IBM Business Automation Workflow - CVE-2024-22243	11 Jun 202409:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to open redirect vulnerability in VMware Tanzu Spring Framework ( CVE-2024-22243)	21 Jun 202415:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-web-5.3.26.jar	10 Jul 202509:05	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Framework is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component	6 May 202416:53	–	ibm

[
  {
    "defaultStatus": "affected",
    "product": "Spring Framework",
    "vendor": "Spring",
    "versions": [
      {
        "lessThan": "6.0.17",
        "status": "affected",
        "version": "6.0.x",
        "versionType": "6.0.17"
      },
      {
        "lessThan": "6.1.4",
        "status": "affected",
        "version": "6.1.x",
        "versionType": "6.1.4"
      },
      {
        "lessThan": "5.3.32",
        "status": "affected",
        "version": "5.3.x",
        "versionType": "5.3.32"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2024-22243
security	www.security.netapp.com/advisory/ntap-20240524-0001/
seclists	www.seclists.org/fulldisclosure/2024/Sep/24

Parameter	Position	Path	Description	CWE
url	query param	/redirect	Open redirect via crafted input URL parsed by UriComponentsBuilder used to determine redirect target.	CWE-601
url	query param	/health-check	SSRF risk from URL parsing mismatch between Spring and standard URL handling when a user-supplied URL is used for health checks.	CWE-601

17 Jun 2026 07:11Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.18.1

EPSS0.03967

SSVC

CWE-601