CVE-2026-47883

MEDIUM CVSS 6.1 View on NVD ↗

Description

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

https://spring.io/security/cve-2026-47883

Published: Aug 27, 2026 06:17 UTC Modified: Aug 27, 2026 17:18 UTC