Описание
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
A flaw was found in Spring WebFlux. A remote attacker interacting with a Spring WebFlux application that supports WebSocket connections could exploit this vulnerability. The flaw occurs because the application may include sensitive request headers in exception reasons, leading to the exposure of user information.
Отчет
This vulnerability is rated as having a Moderate impact because it is restricted to information disclosure and cannot be leveraged for data modification or service interruption. Exploitation requires an attacker to interact with reactive endpoints configured for WebSocket handshakes where errors inadvertently reflect request header data. In Red Hat environments, the overall exposure is limited to deployments actively using Spring WebFlux WebSocket support rather than standard HTTP processing.
Меры по смягчению последствий
Upgrade spring-webflux to the corresponding fixed version (5.3.50 for the 5.3 line; 7.0.9/6.2.20/6.1.29/6.0.31/5.3.50/5.2.26 per the spring.io advisory); for fuse-7, consume the fixed artifact from the Red Hat Fuse maven repository when available; no workaround beyond avoiding WebSocket handshake configurations that surface exception reasons.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Fuse 7 | spring-webflux | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier
A Spring WebFlux application that supports WebSocket connections may e ...
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier
EPSS
5.3 Medium
CVSS3