Lucene search
+L

6 matches found

OSV
OSV
added 2026/06/09 6:31 a.m.8 views

GHSA-9F52-RJQV-25QV Spring Framework Arbitrary Method Invocation in SpEL Expressions

A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2....

3.7CVSS7.1AI score0.00177EPSS
SaveExploits0References5
Rows per page
Query Builder