CVE-2026-41847 | BDVDB-2026-338967 Detail
SpringSpring Framework
Description#
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.
Impact#
Security-related modifications applied to a ServerRequest by a filter in the WebFlux Kotlin Router DSL are silently discarded, causing security enrichment to have no effect and allowing security bypass.
Weaknesses#
- CWE-284 Improper Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.