Threats Tagged 'ghsa-f8c6-vfp5-9fpp'

CVE-2026-47887 is an open redirect vulnerability in the Spring Framework affecting multiple versions from 5.2.25.RELEASE and earlier through 7.0.8. It arises when a Spring MVC application uses UrlFileNameViewController mapped with an end-of-path and lacks a configured prefix, allowing redirection to untrusted sites. The vulnerability has a medium severity with a CVSS score of 6.1.