← Database

CVE-2026-47877

HIGH CVSS: 8.2 Published: 2026-08-27 Modified: 2026-08-28

Description

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6

Affected Platforms

Unknown

Weakness Type

CWE-79

References