Spring Framework MVC applications can be vulnerable to a Path Traversal Vulnerability when deployed on a non-compliant Servlet container. This vulnerability occurs when the application is deployed as a WAR or with an embedded Servlet container, and the container does not reject suspicious sequences. Applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable if default security features are enabled.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2025-41242 |
Exploitation
To exploit this vulnerability, an attacker can craft a request that includes suspicious sequences in the URI path, targeting applications deployed on non-compliant Servlet containers. If the container does not properly handle these sequences, it may allow unauthorized access to sensitive files or directories.
Affected Products
- Spring Framework MVC: Vulnerable when deployed on non-compliant Servlet containers.
- Embedded Servlet Containers: At risk if they do not reject suspicious URI sequences.
Mitigation
It is recommended to upgrade your application to ensure compliance with Servlet container specifications and to enable default security features. Regularly review and update your deployment configurations to mitigate potential vulnerabilities.