{"vulnerability": "CVE-2024-22259", "sightings": [{"uuid": "949031c6-5d3e-45e4-bf03-4a4f17b60075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22262\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\ud83d\udccf Published: 2024-04-16T06:30:28Z\n\ud83d\udccf Modified: 2025-02-13T19:00:56Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22262\n2. https://github.com/spring-projects/spring-framework\n3. https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java\n4. https://security.netapp.com/advisory/ntap-20240524-0003\n5. https://spring.io/security/cve-2024-22262", "creation_timestamp": "2025-02-13T19:21:07.000000Z"}, {"uuid": "355b7775-d900-4f99-8b7c-9f108c8391a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22259\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder in Spring Framework\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243, but with different input.\n\ud83d\udccf Published: 2024-03-16T06:30:27Z\n\ud83d\udccf Modified: 2025-02-13T19:05:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22259\n2. https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb\n3. https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501\n4. https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68\n5. https://github.com/spring-projects/spring-framework\n6. https://security.netapp.com/advisory/ntap-20240524-0002\n7. https://spring.io/security/cve-2024-22259", "creation_timestamp": "2025-02-13T19:16:31.000000Z"}, {"uuid": "a977a8ef-240a-4e15-a73f-2b81f94baedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/arpsyndicate/4683", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.701451", "creation_timestamp": "2024-04-18T04:35:44.000000Z"}, {"uuid": "810b77dc-c1e2-4652-a7bb-63f6820eea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/arpsyndicate/4730", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 26 entries in 6 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.710172", "creation_timestamp": "2024-04-20T18:55:00.000000Z"}, {"uuid": "537d64ac-7ee9-4af1-8676-60ebf236361c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209356", "content": "https://ift.tt/3brlkti\nCVE-2024-22259", "creation_timestamp": "2024-03-16T06:26:22.000000Z"}, {"uuid": "156020e0-0369-4bca-aa1a-9496659e76de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209352", "content": "https://ift.tt/3brlkti\nCVE-2024-22259", "creation_timestamp": "2024-03-16T06:26:16.000000Z"}, {"uuid": "67b51f13-570d-4b38-8fe4-c6e5813f44f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209691", "content": "https://ift.tt/5AHJpBx\nCVE-2024-22259", "creation_timestamp": "2024-03-16T19:56:28.000000Z"}, {"uuid": "3f8d544e-2d5c-417a-af2e-af8c0233f396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/210791", "content": "https://ift.tt/iDWUEAt\nCVE-2024-22259 | VMware Spring Framework up to 5.3.32/6.0.17/6.1.4 UriComponentsBuilder server-side request forgery", "creation_timestamp": "2024-03-18T17:46:38.000000Z"}]}