Spring Framework MVC applications can be vulnerable to a Path Traversal Vulnerability when deployed on a non-compliant Servlet container. This vulnerability occurs when the application is deployed as a WAR or with an embedded Servlet container, and the container does not reject suspicious sequences. Applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable if default security features are enabled.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2025-41242 |
Exploitation
To exploit this vulnerability, an attacker would need to deploy a Spring Framework MVC application on a non-compliant Servlet container that does not properly handle path traversal sequences. By crafting specific requests that include these sequences, the attacker could potentially access sensitive files or resources that should be restricted.
Affected Products
- Spring Framework MVC: Vulnerable when deployed on non-compliant Servlet containers.
- Embedded Servlet Containers: At risk if they do not reject suspicious URI sequences.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade the application to ensure it is deployed on compliant Servlet containers like Apache Tomcat or Eclipse Jetty with default security features enabled. Regularly review and update configurations to prevent exploitation.