Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreSpring Security Authorization Server Open Redirect via request_uri
Description
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter.
An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.
Affected Spring Products and Versions
Spring Security:
- 7.0.0 - 7.0.5
- 1.5.0 - 1.5.7
Mitigation
Users of affected versions should upgrade to the corresponding fixed version.
| Fix version | Availability |
|---|---|
| 7.0.6 | OSS |
| 7.0.5.1 | Enterprise Support Only |
| 1.5.8 | OSS |
| 1.5.7.1 | Enterprise Support Only |
No further mitigation steps are necessary.
Credit
The issue was identified and responsibly reported by Jon Kjennbakken of Vipps MobilePay.
History
- 2026-06-09: Initial vulnerability report published.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
Get support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all