CVE-2026-41847
MEDIUM4.8CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-284CWE
Description
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.
Affected versions:
Spring Framework 5.3.0 through 5.3.48.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.