CVE-2026-41715

6.1 Moyenne

Publiée le 09/06/2026 à 07:16 · Modifiée le 23/07/2026 à 10:10 · En attente d'analyse NVD · Source : security@vmware.com

Description

In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Affected versions: Reactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.

Traduire en français

Produits concernés

Spring Reactor Netty

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-522

Références

https://spring.io/security/cve-2026-41715

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories