Spring Framework 5.3.x < 5.3.44 / 6.1.x < 6.1.22 / 6.2.x < 6.2.10 Path Traversal (CVE-2025-41242)

medium Nessus Plugin ID 253510

Version 1.3

Jan 21, 2026, 5:00 PM

  • IAVM reference

Plugin Feed: 202601211700

Version 1.2

Aug 23, 2025, 2:29 AM

  • IAVM reference
  • STIG Severity (set to "II")

Plugin Feed: 202508230229

Version 1.1

Aug 21, 2025, 6:43 PM

  • New

Plugin Feed: 202508211843

* Changelogs are generally available for changes made after Nov 1, 2022