CVE-2026-47889

Опубликовано: 27 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

Ссылки

https://spring.io/security/cve-2026-47889

EPSS

Процентиль: 17%

0.00253

Низкий

7.5 High

CVSS3

Дефекты

CWE-1275

Связанные уязвимости

CVE-2026-47889

CVSS3: 7.5

ubuntu

12 дней назад

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

CVE-2026-47889

CVSS3: 7.5

debian

12 дней назад

A WebFlux application running on the Jetty 12 Core reactive adapter se ...

GHSA-53cv-4frm-9p27

CVSS3: 7.5

github

12 дней назад

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

EPSS

Процентиль: 17%

0.00253

Низкий

7.5 High

CVSS3

Дефекты

CWE-1275