一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-41003 [HIGH] – An attacker able to influence values in RelyingPartyRegistration may be able to run arbitr

未分类
📑 文章目录

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.

Affected versions:
Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.