目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Spring Framework 产品漏洞列表 / CVE 中文分析 61

Spring Framework 产品相关 61 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。

本页面为 Spring Framework 漏洞聚合页，集中展示该框架相关的安全缺陷与风险。收录内容涵盖从逻辑漏洞到远程代码执行等常见弱点类型，时间范围横跨其发布以来的多个主要版本周期。通过本页，您可以高效追踪 Spring 官方发布的安全公告，深入了解各类已知弱点的技术细节与修复方案，并快速检索该产品的历史漏洞记录以评估自身系统风险。

ベンダー: Pivotal

CVE IDタイトルCVSS深刻度公開日
CVE-2026-41855 Spring Framework Unsafe Deserialization via Jackson JMS Converters CWE-502 8.1 High2026-06-09
CVE-2026-41854 Spring Framework Server-Side Request Forgery via UriComponentsBuilder CWE-918 4.2 Medium2026-06-09
CVE-2026-41853 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux CWE-444 5.3 Medium2026-06-09
CVE-2026-41852 Spring Framework Arbitrary Method Invocation in SpEL Expressions CWE-863 3.7 Low2026-06-09
CVE-2026-41851 Spring Framework Denial of Service via Unbounded Cache in SpEL CWE-770 5.3 Medium2026-06-09
CVE-2026-41850 Spring Framework Algorithmic Denial of Service via SpEL Expressions CWE-407 7.5 High2026-06-09
CVE-2026-41849 Spring Framework Denial of Service via Integer Overflow in SpEL Expressions CWE-190 7.5 High2026-06-09
CVE-2026-41848 Spring Framework Denial of Service via AntPathMatcher CWE-1333 3.7 Low2026-06-09
CVE-2026-41847 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL CWE-284 4.8 Medium2026-06-09
CVE-2026-41846 Spring Framework Cross-site Scripting via JSP Form Tags CWE-79 5.9 Medium2026-06-09
CVE-2026-41845 Spring Framework Cross-site Scripting via JavaScriptUtils CWE-79 7.1 High2026-06-09
CVE-2026-41844 Spring Framework Open Redirect in Spring MVC and WebFlux CWE-601 4.2 Medium2026-06-09
CVE-2026-41843 Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux CWE-22 5.9 Medium2026-06-09
CVE-2026-41842 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux CWE-400 7.5 High2026-06-09
CVE-2026-41841 Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux CWE-524 5.9 Medium2026-06-09
CVE-2026-41840 Spring Framework 资源管理错误漏洞 CWE-401 5.9 Medium2026-06-09
CVE-2026-41839 Spring Framework Escalation via Session Fixation in WebFlux CWE-384 4.2 Medium2026-06-09
CVE-2026-41838 Spring Framework Predictable Session ID in WebSocket Module CWE-330 4.8 Medium2026-06-09
CVE-2026-22745 CVE-2026-22745 : Denial of service in static resource handling on Windows platforms CWE-400 5.3 Medium2026-04-29
CVE-2026-22741 Static resource cache poisoning in Spring MVC and WebFlux CWE-524 3.1 Low2026-04-29
CVE-2026-22740 Spring Framework DoS with Multipart Temp Files in WebFlux CWE-400 6.5 Medium2026-04-29
CVE-2026-22737 Spring Framework Improper Path Limitation with Script View Templates 5.9 Medium2026-03-19
CVE-2025-41254 Spring Framework STOMP CSRF Vulnerability CWE-352 4.3 Medium2025-10-16
CVE-2025-41249 CVE-2025-41249: Spring Framework Annotation Detection Vulnerability 7.5 High2025-09-16
CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers 5.9 Medium2025-08-18
CVE-2025-41234 RFD Attack via “Content-Disposition” Header Sourced from Request CWE-113 6.5 Medium2025-06-12
CVE-2025-22233 Spring Framework DataBinder Case Sensitive Match Exception CWE-20 3.1 Low2025-05-16
CVE-2024-38819 VMware Spring Framework 安全漏洞 CWE-22 7.5 High2024-12-19
CVE-2024-38809 VMware Spring Framework 安全漏洞 5.3 Medium2024-09-27
CVE-2024-38808 CVE-2024-38808: Spring Expression DoS Vulnerability 4.3 Medium2024-08-20

Spring Framework 产品累计公开 61 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。