CVE-2025-41242
1 advisory.
Maven/org.springframework:spring-webmvc CVE-2025-41242: medium 5.9
Spring Framework MVC Applications Path Traversal Vulnerability
Action: Upgrade org.springframework:spring-webmvc to 6.2.10 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.10 | - |
| 6.1.0 | - | 6.1.21 |
| 6.0.0 | - | 6.0.29 |
| 5.3.0 | - | 5.3.43 |
Fixed versions
| 6.2.10 |
Sources
- osv: GHSA-r936-gwx5-v52f
- https://nvd.nist.gov/vuln/detail/CVE-2025-41242
- https://github.com/spring-projects/spring-framework
- http://spring.io/security/cve-2025-41242
CVE-2025-41242 · published · modified · JSON