Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-41847 · ADVISORY
• spring-projects/spring-framework · PACKAGE
• spring.io/security/cve-2026-41847 · WEB

Lỗ hổng khác của org.springframework:spring-webflux

• CVE-2026-47892NGHIÊM TRỌNG 9.8A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre…
• CVE-2026-47890NGHIÊM TRỌNG 9.8Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Fram…
• CVE-2026-41853TRUNG BÌNH 5.3Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 throug…
• CVE-2026-41844TRUNG BÌNH 6.1A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an at…
• CVE-2026-41843TRUNG BÌNH 5.9Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected versions: Spring Fra…