Security Advisory

CVE-2026-41854

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-09 03:51:49

Last updated 2026-06-27 21:06:18

Assigner vmware

CVSS score 4.2

State PUBLISHED

Description

Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.

← Browse all CVEs View on cve.org ↗