GHSA-2wrp-6fg6-hmc5
GitHub Security Advisory
Spring Framework URL Parsing with Host Validation
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259 and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.
Affected Packages
Maven
org.springframework:spring-web
Affected versions:
0
(fixed in 5.3.34)
Maven
org.springframework:spring-web
Affected versions:
6.0.0
(fixed in 6.0.19)
Maven
org.springframework:spring-web
Affected versions:
6.1.0
(fixed in 6.1.6)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 19, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.