238 matches found
shiro-cve-2020-17523
Apache Shiro 두 가지 방식 인증 우회 분석 CVE-2020-17523 0x01 취약점 설명 Apache Shiro는 강력하고 사용하기 쉬운 Java 보안 프레임워크로, 인증, 권한 부여, 암호 및 세션 관리를 수행합니다. Shiro의 이해하기 쉬운 API를 사용하면 가장 작은 모바일 애플리케이션에서 가장 큰 네트워크 및 엔터프라이즈 애플리케이션에 이르기까지 모든 애플리케이션을 빠르고 쉽게 구현할 수 있습니다. Spring과 함께 사용할 때, 특정 권한 매칭 규칙 하에서 공격자는 특수하게 조작된 HTTP 요청 패킷을...
This Week in Spring - September 29th, 2026
Hi, Spring fans! Welcome to another rip-roarin' and exciting installment of This Week in Spring! We've got a ton of cool stuff to look at this week, so let's dive right into it! an important update on Spring's release practice Speaking of which, we had a slew of releases on the 24th, including...
CVE-2026-40987
CVE-2026-40987: Spring Integration 원격 파일 동기화 Path Traversal PoC 이 저장소는 Spring 공식 보안 권고문으로 공개된 CVE-2026-40987의 최소 재현 PoC입니다. 공식 권고문: https://spring.io/security/cve-2026-40987/ 공식 제목: Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without...
CVE-2026-47861
A flaw was found in Spring Integration. An unauthenticated remote attacker can exploit this by sending a specially crafted UDP packet to a Spring Integration UDP inbound adapter. This allows the attacker to cause the server to emit an outbound UDP datagram to any internal or external host and por...
ROOT-APP-MAVEN-CVE-2026-40987 CVE-2026-40987 in org.springframework.integration:spring-integration-file - Patched by Root
Root has patched CVE-2026-40987 in the org.springframework.integration:spring-integration-file package for Root:Maven. Multiple fixed versions available...
Improper Input Validation
Spring Integration is vulnerable to Improper Input Validation. The vulnerability is due to a non-thread-safe ScriptEngine instance being reused across concurrent message processing, potentially causing message data leakage between script evaluations or spurious exceptions...
Improper Preservation Of Message Metadata
Spring Integration is vulnerable to improper preservation of message metadata. The vulnerability is due to reply and propagated headers being copied from the most recently consumed upstream message when .fluxTransform processes raw payloads asynchronously or out of order, which allows an attacker...
Improper Handling Of Untrusted Message Headers
Spring Integration is vulnerable to improper handling of untrusted message headers. The vulnerability is due to the EmbeddedHeadersJsonMessageMapper deserializing embedded JSON headers into a Map and creating message headers without sanitizing or filtering untrusted header names by default, which...
Denial Of Service
Spring Integration is vulnerable to Denial of Service. The vulnerability is due to the UnZipTransformer not limiting decompressed entry size or entry count when processing archives, where an attacker can send a crafted zip archive that exhausts JVM heap memory and causes a denial-of-service outag...
Deserialization Protection Bypass
org.springframework.integration, spring-integration-jdbc is vulnerable to a deserialization protection bypass. The vulnerability is due to JdbcMessageStore.addAllowedPatterns... providing no effective protection when the store is configured as a Spring-managed bean, which allows an attacker to...
CVE-2026-59324
A flaw was found in Spring Integration. When an IntegrationFlow uses .fluxTransform with an asynchronous fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription can have their reply headers copied from other messages. This information disclosure...
CVE-2026-47864
A flaw was found in Spring Integration. The SerializingHttpMessageConverter component deserializes incoming HTTP request bodies without proper class filtering. A remote, unauthenticated attacker can exploit this by sending a specially crafted HTTP request. If a known Java deserialization 'gadget'...
Authorization Bypass
Spring Integration is vulnerable to Authorization Bypass. The vulnerability is due to JMS properties such as replyChannel, errorChannel, and jsonTypeId being copied without validation into Spring Integration MessageHeaders, which allows an attacker with JMS publish access to manipulate message...
CLSA-2026-1788820092 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.20-tuxcare.6...
Deserialization Of Untrusted Data
Spring Integration is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to SerializingHttpMessageConverter deserializing HTTP request bodies using ObjectInputStream.readObject without class filtering, which allows an unauthenticated attacker to provide a crafted serialized...
Server-Side Request Forgery (SSRF)
Spring Integration is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of UDP inbound adapter requests, which allows an unauthenticated attacker to send a crafted UDP packet and cause the server to send UDP datagrams to arbitrary internal or...
Deserialization Of Untrusted Data
Spring Integration is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the jsonTypeId header being used to determine the deserialization target class without a type or package allow-list, which allows an attacker to specify a malicious class and potentially achieve...
Arbitrary File Write
org.springframework.integration, spring-integration-zip is vulnerable to arbitrary file write. The vulnerability is due to improper validation of the filename header when processing messages with ZipResultType.FILE, which allows an attacker to specify an arbitrary filesystem path and cause the...
Uncontrolled Memory Allocation
Spring Integration is vulnerable to uncontrolled memory allocation. The vulnerability is due to the deserializer trusting the sender-supplied octet count and allocating a byte array of the specified size without an upper limit, which allows an attacker to send a maliciously large frame length and...