Known vulnerabilities in Spring Framework 5.3.23

Vendor: Broadcom
Version: 5.3.23
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Framework version 5.3.23 Spring Framework 5.3.23 is affected by 21 vulnerabilities: 17 medium, 4 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128385 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-22735
CWE-74 Low
No
No
5.3.47, 6.1.26, 6.2.17, 7.0.6 28.04.2026 SB20260428206
SB2026043058
SB2026052217
and 4 more
#VU128372 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-22737
CWE-22 Medium
No
No
5.3.47, 6.1.26, 6.2.17, 7.0.6 28.04.2026 SB20260428206
SB2026043058
SB2026052218
and 4 more
#VU126710 - Resource exhaustion
CVE-2026-22745
CWE-400 Medium
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB2026060904
and 2 more
#VU126709 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-22741
CWE-349 Low
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB20260528259
and 2 more
#VU126708 - Improper Resource Shutdown or Release
CVE-2026-22740
CWE-404 Low
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB2026060812
#VU117323 - Cross-Site Request Forgery (CSRF)
CVE-2025-41254
CWE-352 Medium
No
No
5.3.46, 6.1.24, 6.2.12 16.10.2025 SB2025101638
SB2025121921
SB2026012235
and 3 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249
CWE-693 Medium
No
No
5.3.45, 6.1.23, 6.2.11 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242
CWE-22 Medium
No
No
5.3.44, 6.1.22, 6.2.10 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU109251 - Security Features
CVE-2025-22233
CWE-254 Low
No
No
5.3.43, 6.0.28, 6.1.20, 6.2.7 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU100680 - Improper input validation
CVE-2024-38828
CWE-20 Medium
No
No
5.3.42 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819
CWE-22 Medium
Public exploit available
No
5.3.41, 6.0.25, 6.1.14 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98795 - Security Features
CVE-2024-38820
CWE-254 Medium
No
No
5.3.41, 6.0.25, 6.1.14 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816
CWE-22 Medium
Public exploit available
No
5.3.40, 6.0.24, 6.1.13 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU96019 - Resource exhaustion
CVE-2024-38808
CWE-400 Medium
No
No
5.3.39 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809
CWE-20 Medium
No
No
5.3.38, 6.0.23, 6.1.12, 6.2.0-M7 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262
CWE-918 Medium
No
No
5.3.34, 6.0.19, 6.1.6 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259
CWE-918 Medium
No
No
5.3.33, 6.0.18, 6.1.5 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243
CWE-918 Medium
Public exploit available
No
5.3.32, 6.0.17, 6.1.4 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU75562 - Improper input validation
CVE-2023-20861
CWE-20 Medium
No
No
5.2.23, 5.3.26, 6.0.7 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
5.3.26, 6.0.7 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more


Showing elements 1 - 20 out of 21