CVE-2026-22737 Spring Framework Improper Path Limitation with Script View Templates

🗓️ 19 Mar 2026 23:53:59Reported by vmwareType

CVE-2026-22737: Spring Framework can disclose files outside configured script template locations.

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Spring	27 Apr 202609:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Spring Framework	17 Apr 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to content disclosure in Spring MVC and WebFlux [CVE-2026-22737]	21 May 202615:44	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-webmvc-6.2.16.jar, IBM Sterling Connect:Direct Web Services is affected by disclosure of content from files outside the configured locations for script template views.	17 Apr 202616:08	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Locking, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVE-2026-22735, CVE-2026-22737)	15 Jun 202622:14	–	ibm

[
  {
    "vendor": "Spring",
    "product": "Spring Framework",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.16",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.25",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.3.0",
        "lessThanOrEqual": "5.3.46",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
spring	www.spring.io/security/cve-2026-22737

19 Mar 2026 23:53Current

CVSS 3.15.9

EPSS0.00385