Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 5 days ago6 views

Spring Framework 5.3.x < 5.3.49 Multiple Vulnerabilities

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.49. It is, therefore, affected by multiple vulnerabilities: - Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. CVE-2026-41847 - An integer overflow vulnerability...

7.5CVSS5.6AI score0.00263EPSS
Exploits0References4
NVD
NVD
added 2026/06/09 5:16 a.m.11 views

CVE-2026-41847

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

5.3CVSS0.00157EPSS
Exploits0References1
OSV
OSV
added 2026/06/09 5:16 a.m.3 views

UBUNTU-CVE-2026-41847

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

5.3CVSS5.4AI score0.00157EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/06/09 3:51 a.m.29 views

CVE-2026-41847 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

4.8CVSS0.00157EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/09 3:51 a.m.8 views

EUVD-2026-35335

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

4.8CVSS5.4AI score0.00157EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/09 3:51 a.m.7 views

CVE-2026-41847 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

4.8CVSS5.4AI score0.00157EPSS
Exploits0References1
CVE
CVE
added 2026/06/09 3:51 a.m.15 views

CVE-2026-41847

CVE-2026-41847 : Spring Framework WebFlux Kotlin Router DSL may be vulnerable to a security bypass. Affected versions: Spring Framework 5.3.0 through 5.3.48. The CVE records a bypass in WebFlux when using the Kotlin Router DSL, with a CVSS v3.1 base score of 4.8 (Medium). Impact indicators in the...

5.3CVSS5.4AI score0.00157EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-41847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

5.3CVSS5.4AI score0.00157EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.10 views

PT-2026-47658

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.48 Description Spring WebFlux applications may be subject to a security bypass when utilizing the Kotlin Router DSL. Recommendations At the moment, there is no information about a newer version that...

5.3CVSS5.2AI score0.00157EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.5 views

Spring Framework 访问控制错误漏洞

The Spring Framework is an application development framework developed by Spring in open source. Versions 5.3.0 to 5.3.48 of the Spring Framework contain a security access control vulnerability. This vulnerability arises from potential security bypasses when using the Kotlin Router DSL...

5.3CVSS5.3AI score0.00157EPSS
Exploits0References1
Snyk
Snyk
added 2026/06/08 12:0 a.m.6 views

Incorrect Authorization

Overview org.springframework:spring-webflux is a Spring Framework module that contains support for reactive HTTP and WebSocket clients as well as for reactive server web applications including REST, HTML browser, and WebSocket style interactions. Affected versions of this package are vulnerable t...

6.3CVSS5.4AI score0.00157EPSS
Exploits0References2
Rows per page
Query Builder