https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:09:08.422892+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-09167 cnvd-2017-09167 2026-10-06T20:09:08.425933+00:00 cnvd-2017-09167 https://cve.radiocsirt.org/vuln/euvd-2026-73026 EUVD-2026-73026 2026-10-06T20:09:08.425966+00:00 EUVD-2026-73026 https://cve.radiocsirt.org/vuln/fkie_cve-2017-4971 fkie_cve-2017-4971 2026-10-06T20:09:08.425981+00:00

An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.

 https://cve.radiocsirt.org/vuln/ghsa-fg9w-cffm-pmh2 GHSA-fg9w-cffm-pmh2 — Insecure Default Initialization of Resource in Pivotal Spring Web Flow 2026-10-06T20:09:08.426012+00:00

Affected: Maven: org.springframework.webflow:spring-webflow

An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.

 https://cve.radiocsirt.org/vuln/gsd-2017-4971 gsd-2017-4971 2026-10-06T20:09:08.426037+00:00 gsd-2017-4971