← Back

CVE-2026-41730

nvd nist
Published: Jun 10, 2026Modified: Jul 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: security@vmware.com (Secondary)

Description

Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through 5.0.5.

Affected (5)

Vmware
1 product
Spring Data Rest
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Data Rest
From 3.7.0 to 3.7.20
Spring Data Rest
From 4.3.0 to 4.3.17
Spring Data Rest
From 4.4.0 to 4.4.15
Spring Data Rest
From 4.5.0 to 4.5.11.1
Spring Data Rest
From 5.0.0 to 5.0.5.1

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.