CVE-2018-15756

score

<0.1

cvss

7.5

epss

9.2%

published

2018-10-18

kev added

—

first seen

2026-10-21

Spring Framework versions 4.2.x prior to 4.2.20, 5.0.x prior to 5.0.10, 4.3.x prior to 4.3.20, and 5.1 contain a denial of service caused by handling of range requests in ResourceHttpRequestHandler or annotated controllers returning Resources, letting attackers cause service disruption with malicious range headers, exploit requires attacker to send crafted range headers.