CVE-2026-59314

Published: Aug 27, 2026Modified: Sep 1, 2026

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier

Affected (6)

Products: Vmware: Spring Framework

Vmware

1 product

Spring Framework

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Framework	version ≤ 5.2.25
Vmware Spring Framework	5.3.0 ≤ version ≤ 5.3.49
Vmware Spring Framework	6.0.0 ≤ version ≤ 6.0.30
Vmware Spring Framework	6.1.0 ≤ version ≤ 6.1.28
Vmware Spring Framework	6.2.0 ≤ version ≤ 6.2.19
Vmware Spring Framework	7.0.0 ≤ version ≤ 7.0.8

Related CWEs

CWE-113

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.

References (1)

https://spring.io/security/cve-2026-59314

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.