Skip to content
OpenAdvisories

Product · Spring

Spring Framework

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-47884 Public exploit

    Spring Framework Improper Path Limitation in XsltView

    Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - …

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven