broadcom spring web flow güvenlik açıkları (CVE)

broadcom spring web flow için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

4.8Orta

CVE-2026-40986 5 ay önce

Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML

Spring Spring Web Flow

Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the user's browser if the error response from the server contains error details wit…

6.4Orta

CVE-2026-40985 5 ay önce

Data Binding Vulnerability in Spring Web Flow with Unified EL Parser

Spring Spring Web Flow

Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.