Critical Spring Authorization Server Issue Exposes Systems to XSS and SSRF Attacks

Critical Spring Authorization Server Issue Exposes Systems to XSS and SSRF Attacks

Summary

A critical vulnerability, tracked as CVE-2026-22752, has been disclosed in Spring Security Authorization Server.

Description

A critical vulnerability, tracked as CVE-2026-22752, has been disclosed in Spring Security Authorization Server.

Original reporting

AFBytes is a read-only aggregator. Use the original source for full context and complete reporting.

Open original source

Related coverage