Skip to content
OpenAdvisories

Product · VMware

Spring Authorization Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-59355

    Spring Authorization Server: Open Redirect via request_uri parameter

    In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri…

    VMware Spring Authorization Server