CVE-2026-59307
8.0
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 6.0
Source: security@vmware.com (Secondary)
Description
An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12
Affected (8)
Products: Vmware: Spring Integration
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 6.4.0 ≤ version ≤ 6.4.12 |
References (1)
Timeline
No history available yet.