Skip to content
fr Sign in
8.2 High

CVE-2026-59316 Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding

Description

Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and later rendered unencoded in the default consent page presented to the end user. Spring Authorization Server 1.5.0 - 1.5.8 Spring Authorization Server 1.4.0 - 1.4.11

Affected products and versions

Product Affected versions Fixed in
Spring Authorization Server 1.5 1.5.0 → 1.5.8 No fix stated
Spring Authorization Server 1.4 1.4.0 → 1.4.11 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Spring Authorization Server

The 2 CVEs of Spring Authorization Server →
CVE-2026-41008 Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri… 6.1 Medium
Track this CVE