Spring Framework Cross-site Scripting via JSP Form Tags

🗓️ 09 Jun 2026 06:31:58Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 8 Views

Spring Framework JSP form tags allow XSS via style-related attributes in drop-in fields.

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Information Disclosure, Denial of Service (Dos) attacks, and Path Traversal attacks	26 Jun 202618:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	21 Jul 202603:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC [CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-webmvc jar	27 Jul 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jun 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	22 Jul 202607:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring MVC and WebFlux affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Spring MVC affects IBM Netezza Appliance	12 Aug 202608:48	–	ibm
Chainguard	CVE-2026-41846 vulnerabilities	31 Jul 202620:22	–	cgr
CNNVD	Spring Framework 跨站脚本漏洞	9 Jun 202600:00	–	cnnvd

Vulners

Node

OR

org.springframework spring-webmvcRange≤5.3.39maven

org.springframework spring-webmvcRange6.1.0–6.1.21maven

org.springframework spring-webmvcRange6.2.0–6.2.18maven

org.springframework spring-webmvcRange7.0.0–7.0.7maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41846
spring	www.spring.io/security/cve-2026-41846
github	www.github.com/spring-projects/spring-framework/commit/1829b42b9c45e780c268dd17863d9198d62154d3
github	www.github.com/spring-projects/spring-framework/commit/e8f10244e3859e8bb5b6be3823c9bbea2c130573
github	www.github.com/spring-projects/spring-framework/releases/tag/v6.2.19
github	www.github.com/spring-projects/spring-framework/releases/tag/v7.0.8
github	www.github.com/advisories/GHSA-957g-f97v-vppc

30 Jul 2026 18:37Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.9 - 6.1

EPSS0.00152

SSVC

cross site scripting jsp form tags style class attribute style error class attribute style attribute