Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/07/17 1:20 p.m.•20 views

CVE-2026-41853

A flaw was found in Spring MVC and WebFlux applications, components of the Spring Framework. This vulnerability allows a remote, unauthenticated attacker to perform Multipart request smuggling attacks. Such an attack can lead to a low integrity impact, potentially enabling the attacker to bypass...

5.3CVSS5.9AI score0.0031EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/06/09 6:31 a.m.•20 views

Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS6.2AI score0.0031EPSS
SaveExploits0References5Affected Software2
NVD
NVD
•added 2026/06/09 5:16 a.m.•26 views

CVE-2026-41853

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/09 3:51 a.m.•19 views

CVE-2026-41853 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS6.2AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/09 3:51 a.m.•273 views

CVE-2026-41853

CVE-2026-41853 concerns Multipart request smuggling in Spring Framework’s Spring MVC and WebFlux components. Affected are Spring Framework versions: 7.0.0–7.0.7; 6.2.0–6.2.18; 6.1.0–6.1.27; 5.3.0–5.3.48. The CVE entry identifies the issue as a vulnerability in multipart handling, with an accompan...

5.3CVSS6.2AI score0.0031EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/09 3:51 a.m.•65 views

CVE-2026-41853 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS0.0031EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-41853: Inconsistent Interpretation of HTTP Requests

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS5.9AI score0.0031EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•2 views

PT-2026-66647

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

5.3CVSS5.9AI score0.0031EPSS
SaveExploits0References6
Rows per page
Query Builder