CVE-2026-59355

Katalog CVE

CVSS 6.1 · Medium EPSS 0,24%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada broadcom spring authorization server. Skor CVSS 3.1 6.1 (Medium) menurut vmware.com.

Deskripsi (NVD)

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site.

Rincian

Terbit di NVD

27 Agustus 2026

Terakhir diubah

1 September 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber vmware.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://spring.io/security/cve-2026-59355 advisory vendor