onyx --cves cve-2024-22259

CVE-2024-22259

score: 4.4
cvss: 8.1
epss: 2.6%
published: 2024-03-16
kev added: —
first seen: 2026-10-21

Applications using UriComponentsBuilder in Spring Framework to parse external URLs and validate the host may be vulnerable to open redirect or SSRF attacks if the URL is used after validation, exploit depends on passing validation checks.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2024-03-16 Published
2026-10-16 First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
2026-10-21 Tracked by Onyx

Advisories

1 feed this week

ADV Multiples vulnérabilités dans les produits IBM (16 octobre 2026) CERT-FR (avis) · 2026-10-16

Weaknesses

CWE-601

References 2

https://spring.io/security/cve-2024-22259
https://security.netapp.com/advisory/ntap-20240524-0002/