Spring Framework MVC applications can be vulnerable to a Path Traversal Vulnerability when deployed on a non-compliant Servlet container. This vulnerability occurs when the application is deployed as a WAR or with an embedded Servlet container, the Servlet container does not reject suspicious sequences, and the application serves static resources with Spring resource handling. It is recommended to upgrade your application to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2025-41242 |
Exploitation
To exploit this vulnerability, an attacker would need to deploy a Spring Framework MVC application on a non-compliant Servlet container that does not properly handle path traversal sequences. By crafting specific requests that leverage this weakness, the attacker could potentially access sensitive files or resources that should be restricted.
Affected Products
- Spring Framework MVC applications deployed as WAR files or with embedded Servlet containers.
- Servlet containers that do not reject suspicious URI sequences.
- Applications serving static resources using Spring resource handling.
Mitigation
To mitigate this vulnerability, it is crucial to ensure that your application is deployed on compliant Servlet containers like Apache Tomcat or Eclipse Jetty with default security features enabled. Additionally, upgrading the application to the latest version of the Spring Framework is strongly recommended to address any potential security issues.