This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-40999 | BDVDB-2026-339739 Detail

SpringSpring Web Services

Description#

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Impact#

A remote attacker can supply crafted WS-Addressing ReplyTo or FaultTo headers that cause the server to initiate outbound connections to internal-only hosts, cloud metadata endpoints, or other sensitive destinations.

Weaknesses#

  • CWE-918 Server-Side Request Forgery (SSRF)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.