← Back

CVE-2026-41730

nvd nist
Published: Jun 10, 2026Modified: Jul 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: security@vmware.com (Secondary)

Description

Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through 5.0.5.

Affected (5)

Vmware
1 product
Spring Data Rest
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Data Rest
3.7.0 ≤ version < 3.7.20
Spring Data Rest
4.3.0 ≤ version < 4.3.17
Spring Data Rest
4.4.0 ≤ version < 4.4.15
Spring Data Rest
4.5.0 ≤ version < 4.5.11.1
Spring Data Rest
5.0.0 ≤ version < 5.0.5.1

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.