{"id":"CVE-2026-47883","title":"UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns","summary":"UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-601"],"vendor":"vmware","product":"spring_framework","affected":["spring_framework >= 6.2.0, < 6.2.20","spring_framework >= 7.0.0, < 7.0.8.1"],"patched":["spring_framework 7.0.8.1"],"published":"2026-08-27","updated":"2026-09-10","sourceUpdated":"2026-09-10T14:54:50.113","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47883","references":[{"url":"https://spring.io/security/cve-2026-47883","label":"security@vmware.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47883.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-47883"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524836"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47883"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47883"}],"tags":["nvd","cve.org","exploit-available","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-27T15:01:51.233776Z"},"ingestedAt":"2026-09-13T19:08:53.062Z","epss":0.00261,"epssPercentile":0.1772,"exploits":{"github":1,"githubRepos":["https://github.com/daehyuh/CVE-2026-47883"],"checkedAt":"2026-10-27T19:01:18.907Z"},"exploitAvailable":true,"scores":{"nvd":6.1,"vendor":5.4},"slug":"CVE-2026-47883","body":"## Overview\n\nUrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\n\n## Affected\n\n- `spring_framework >= 6.2.0, < 6.2.20`\n- `spring_framework >= 7.0.0, < 7.0.8.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `spring_framework 7.0.8.1`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat build of Apache Camel - HawtIO 4, Red Hat Fuse 7, Red Hat OpenShift Dev Spaces, Red Hat Single Sign-On 7 · no fix planned: Red Hat Fuse 7, Red Hat Single Sign-On 7, Red Hat build of Apache Camel - HawtIO 4, Red Hat OpenShift Dev Spaces · updated 2026-09-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47883.json)","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":183319,"id":"CVE-2026-47883","ts":1789355999928,"field":"exploit_available","old":"false","new":"true"}]}