CVE-2018-1199

score

<0.1

cvss

5.3

epss

2.9%

published

2018-03-16

kev added

—

first seen

2026-10-21

Spring Security versions 4.1.x before 4.1.5, 4.2.x before 4.2.4, 5.0.x before 5.0.1, and Spring Framework 4.3.x before 4.3.14, 5.0.x before 5.0.3 contain a security bypass caused by improper handling of URL path parameters, letting attackers bypass security constraints by using special encodings, exploit requires attacker to craft specific URL with encoded path parameters.