CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It affects Java.
CVE
CVE-2026-22737
Severity
MEDIUM
CVSS
5.9
EPSS
0.39%
Java
Original NVD Description
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of content from files outside the configured locations for script template views. This issue affects Spring Framework: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.
Related CVEs
Other vulnerabilities affecting the same vendor(s)