< Back

CVE-2026-59297

Updated on 27 Aug 2026

Severity

3.5 Low severity

Details

CVSS score
3.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7

Details

Affected product:
Spring
Affected packages:
Spring Cloud @ 4.2.4 (+73 more)