Approved changes feed: RSS · Atom

cpe:2.3:a:spring:spring_web_flow:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc)
ProductSpring Web Flow (af706456-eaaa-5167-a6ab-6413db7005a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40986 vulnerable 2026-07-29 00:49:30.822845 Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
MEDIUM (4.8)
Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the user's browser if the error response from the server contains error details with input reflected from an attacker. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.
Published: 2026-06-11T05:03:26.458Z
Updated: 2026-06-23T19:42:23.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40985 vulnerable 2026-07-29 00:49:30.822643 Data Binding Vulnerability in Spring Web Flow with Unified EL Parser
MEDIUM (6.4)
Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.
Published: 2026-06-11T05:02:53.887Z
Updated: 2026-06-23T19:09:40.302Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.