CVE-2026-41853 | BDVDB-2026-338973 Detail
SpringSpring Framework
Description#
Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Impact#
An attacker can send malicious multipart requests that are parsed differently by the application versus its WAF or proxy, bypassing security checks in applications that accept multipart requests.
Weaknesses#
- CWE-444 Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.