PT-2026-82403
CVE-2026-47885
·
تاريخ النشر
2026-08-27
·
تاريخ التحديث
2026-10-08
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Spring Framework versions 7.0.0 through 7.0.8
Spring Framework versions 6.2.0 through 6.2.19
Spring Framework versions 6.1.0 through 6.1.28
Description
The
PartEventHttpMessageReader in Spring WebFlux fails to enforce the maxPartSize limit when the maxInMemorySize variable is configured to -1.Recommendations
Update Spring Framework versions 7.0.0 through 7.0.8 to a newer version.
Update Spring Framework versions 6.2.0 through 6.2.19 to a newer version.
Update Spring Framework versions 6.1.0 through 6.1.28 to a newer version.
Avoid setting the
maxInMemorySize variable to -1 to ensure the maxPartSize limit is enforced. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾