CVE-2026-47877 Security Details

CVE ID

CVE-2026-47877

CWE

CWE-79

CVE Description

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6

Published

Aug 21, 2026

CVSS Score & Severity

6.1Medium

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

0.277%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/springframework/security/oauth2/server/authorization/web/DefaultConsentPage.generateConsentPage(Ljakarta/servlet/http/HttpServletRequest;Ljava/lang/String;Lorg/springframework/security/core/Authentication;Ljava/util/Set;Ljava/util/Set;Ljava/lang/String;Ljava/util/Map;)Ljava/lang/String;

JVMVulnerable params: 0, 1, 2, 3, 4, 5, 6

org/springframework/security/oauth2/server/authorization/web/OAuth2AuthorizationEndpointFilter$DefaultConsentPage.generateConsentPage(Ljakarta/servlet/http/HttpServletRequest;Ljava/lang/String;Lorg/springframework/security/core/Authentication;Ljava/util/Set;Ljava/util/Set;Ljava/lang/String;)Ljava/lang/String;

JVMVulnerable params: 0, 1, 2, 3, 4, 5

Affected Ecosystems

affected

Source

National Vulnerability Database

References

spring.ioPROJECT