STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 - 6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older, unsupported versions are also affected. MitigationUsers of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary. CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.46, 6.1.x prior to 6.1.24, or 6.2.x prior to 6.2.12. It is, therefore, affected by a STOMP CSRF vulnerability:

  - STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send     unauthorized messages. (CVE-2025-41254)     Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send     unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 -     6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older, unsupported versions are also affected. MitigationUsers     of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix     versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of     support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial     https://enterprise.spring.io/ No further mitigation steps are necessary. CreditThis vulnerability was     discovered and responsibly reported by Jannis Kaiser. (CVE-2025-41254)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send
    unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 -
    6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older, unsupported versions are also affected. MitigationUsers
    of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix
    versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of
    support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial
    https://enterprise.spring.io/ No further mitigation steps are necessary. CreditThis vulnerability was
    discovered and responsibly reported by Jannis Kaiser. (CVE-2025-41254)

ID	Name	Product	Family	Severity
275873	Spring Framework 5.3.x < 5.3.46 / 6.1.x < 6.1.24 / 6.2.x < 6.2.12 STOMP CSRF (CVE-2025-41254)	Nessus	Misc.	medium
271655	Linux Distros Unpatched Vulnerability : CVE-2025-41254	Nessus	Misc.	medium
435676	SCA: security update for org.springframework:spring-websocket (GHSA-7fch-4f2f-jcgm)	Tenable Cloud Security	SCA Checks	medium
435676	SCA: security update for org.springframework:spring-websocket (GHSA-7fch-4f2f-jcgm)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2025-41254

medium

Tenable Plugins

medium

medium

medium

medium