Threats Tagged 'ghsa-cjjj-j5gv-xhv7'

1 threat

Threats Tagged 'ghsa-cjjj-j5gv-xhv7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-47880Spring Integration · Improper Input Validation Medium5.4EPSS 0.3%2026-08-27CVE Database V5CVE-2026-47880 CVE-2026-47880 is a medium severity vulnerability in Spring Integration affecting multiple versions including 5.5.21 and earlier, 6.4.0 through 6.4.12, 6.5.0 through 6.5.10, 7.0.0 through 7.0.5, and 7.1.0. It involves improper input validation where a JMS message producer can set certain JMS String properties (replyChannel, errorChannel, json__TypeId__) that are copied directly into Spring Integration MessageHeaders without validation. EPSS 0.3%Vulnerability Spring #cwe-20 #ghsa-cjjj-j5gv-xhv7	CVE Database V5	2026-08-27

Showing 1–1 of 1 result