CVE-2026-47887

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring Framework versions prior to 5.2.25.RELEASE

Description A Spring MVC application is susceptible to an open redirect when using UrlFileNameViewController mapped with an end-of-path and without a configured prefix. An open redirect is a security flaw that allows an attacker to redirect users to an external, potentially malicious website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.