Lucene search
+L

12 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/22 12:39 a.m.•0 views

CLEANSTART-2026-CU45491 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:43 a.m.•20 views

CLEANSTART-2026-AY49632 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the apache-nifi-registry package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:34 a.m.•16 views

CLEANSTART-2026-IY13000 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/29 12:38 a.m.•18 views

CLEANSTART-2026-TS74004 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the apache-hive package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

9.8CVSS6.7AI score0.00416EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/08/27 6:17 a.m.•11 views

DEBIAN-CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/27 6:17 a.m.•34 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/27 6:17 a.m.•14 views

UBUNTU-CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/27 5:21 a.m.•17 views

CVE-2026-47893 Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

6.7AI score0.00416EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/27 5:21 a.m.•16 views

EUVD-2026-66861

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

6.8AI score0.00416EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/27 5:21 a.m.•19 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•21 views

PT-2026-82411

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•6 views

CVE-2026-47893: Generation of Error Message Containing Sensitive Information

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.8AI score0.00416EPSS
SaveExploits0References3
Rows per page
Query Builder