CVE-2024-22243: CVE-2024-22243: Spring Framework URL Parsing with Host Validation

Description

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)4.0% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SF

Spring Framework · Spring

6.0.x before 6.0.17; 6.1.x before 6.1.4; 5.3.x before 5.3.32 · source: vendor, CISA

AI

Active IQ Unified Manager · Netapp

5.0; 5.0; 5.0 · source: CISA