Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Spring Framework — Vulnerabilities & Security Advisories 78

All 78 CVE vulnerabilities found in Spring Framework, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Spring Framework, a widely-used Java application framework maintained by VMware and now Spring.io. It collects reported defects and associated advisories for this specific product, covering historical and recent disclosures within the tracked time range. Readers can use this interface to monitor new security advisories issued by the vendor, understand the prevalence of specific weakness classes, and review the complete vulnerability history for Spring Framework.

Vendor: Pivotal

CVE ID Title CVSS Severity Published
CVE-2021-22060 Vmware Spring Framework 安全漏洞 4.3 - 2022-01-07
CVE-2021-22096 Vmware Spring Framework 安全漏洞 CWE-117 4.3 - 2021-10-28
CVE-2021-22118 Vmware Spring Framework 权限许可和访问控制问题漏洞 CWE-269 7.8 - 2021-05-27
CVE-2020-5421 RFD Protection Bypass via jsessionid 7.9 - 2020-09-19
CVE-2020-5397 CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CWE-352 8.1 - 2020-01-17
CVE-2020-5398 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CWE-79 7.5 - 2020-01-16
CVE-2018-15756 DoS Attack via Range Requests 8.2 - 2018-10-18
CVE-2018-11039 Pivotal Spring Framework 安全漏洞 3.7 - 2018-06-25
CVE-2018-11040 Pivotal Spring Framework 安全漏洞 7.5 - 2018-06-25
CVE-2018-1258 Vmware Spring Framework和VMware Spring Security 授权问题漏洞 8.8 - 2018-05-11
CVE-2018-1257 Pivotal Spring Framework 输入验证错误漏洞 7.5 - 2018-05-11
CVE-2018-1274 Spring Data Commons 安全漏洞 7.5 - 2018-04-18
CVE-2018-1273 Pivotal Software Spring Data Commons和Spring Data REST 输入验证错误漏洞 CWE-94 9.8 - 2018-04-11
CVE-2018-1275 Pivotal Spring Framework 安全漏洞 CWE-94 9.8 - 2018-04-11
CVE-2018-1272 Pivotal Spring Framework 权限许可和访问控制问题漏洞 6.8 - 2018-04-06
CVE-2018-1271 Pivotal Spring Framework 路径遍历漏洞 CWE-22 5.9 - 2018-04-06
CVE-2018-1270 Pivotal Software Spring Framework 代码注入漏洞 CWE-94 9.8 - 2018-04-06
CVE-2014-0225 Pivotal Spring Framework 安全漏洞 8.8 - 2017-05-25

All 78 known CVE vulnerabilities affecting Spring Framework with full Chinese analysis, references, and POCs where available.