CVE-2016-5007

score

<0.1

cvss

7.5

epss

2.9%

published

2017-05-25

kev added

—

first seen

2026-10-21

Spring Security 3.2.x, 4.0.x, 4.1.0 and Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x contain a security misconfiguration caused by differences in URL pattern matching mechanisms, letting unprotected paths be mapped to protected controllers, exploit requires configuration discrepancies.