{"id":"CVE-2020-5421","title":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the …","summary":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","vendor":"vmware","product":"spring_framework","affected":["spring_framework < 4.3.29","spring_framework >= 5.0.0, < 5.0.19","spring_framework >= 5.1.0, < 5.1.18","spring_framework >= 5.2.0, < 5.2.9","commerce_guided_search = 11.3.2","communications_brm = 11.3.0.9","communications_brm = 12.0.0.3","communications_design_studio = 7.3.4","communications_design_studio = 7.3.5","communications_design_studio = 7.4.0","communications_session_report_manager >= 8.2.1, <= 8.2.2.1","communications_unified_inventory_management = 7.3.4","communications_unified_inventory_management = 7.3.5","endeca_information_discovery_integrator = 3.2.0","enterprise_data_quality = 12.2.1.3.0","enterprise_data_quality = 12.2.1.4.0","financial_services_analytical_applications_infrastructure >= 8.0.6, <= 8.1.0","flexcube_private_banking = 12.0.0","flexcube_private_banking = 12.1.0","fusion_middleware = 12.2.1.3.0","fusion_middleware = 12.2.1.4.0","goldengate_application_adapters = 19.1.0.0.0","healthcare_master_person_index = 4.0.2.5","hyperion_infrastructure_technology = 11.1.2.4","insurance_policy_administration >= 11.1.0, <= 11.3.0","insurance_policy_administration = 10.2","insurance_policy_administration = 10.2.4","insurance_policy_administration = 11.0.2","insurance_rules_palette >= 11.1.0, <= 11.3.0","insurance_rules_palette = 10.2.0","insurance_rules_palette = 10.2.4","insurance_rules_palette = 11.0.2","mysql_enterprise_monitor <= 8.0.22","mysql_enterprise_monitor = 8.0.23","primavera_gateway >= 16.2.0, <= 16.2.11","primavera_gateway >= 17.12.0, <= 17.12.9","primavera_gateway >= 18.8.0, <= 18.8.10","primavera_gateway >= 19.12.0, <= 19.12.10","primavera_p6_enterprise_project_portfolio_management >= 16.1.0, <= 16.2.20","primavera_p6_enterprise_project_portfolio_management >= 17.1.0, <= 17.12.19","primavera_p6_enterprise_project_portfolio_management >= 18.1.0, <= 18.8.21","primavera_p6_enterprise_project_portfolio_management >= 19.12.0, <= 19.12.10","retail_assortment_planning = 16.0.3.0","retail_bulk_data_integration = 16.0.3.0","retail_customer_engagement >= 16.0, <= 19.0","retail_customer_management_and_segmentation_foundation >= 16.0, <= 19.0","retail_financial_integration = 14.1.3","retail_financial_integration = 15.0.3","retail_financial_integration = 16.0.3","retail_integration_bus = 14.1.3","retail_integration_bus = 15.0.3","retail_integration_bus = 16.0.3","retail_invoice_matching = 14.0","retail_invoice_matching = 14.1","retail_merchandising_system = 16.0.3","retail_order_broker = 15.0","retail_order_broker = 16.0","retail_predictive_application_server = 14.1","retail_returns_management = 14.1","retail_service_backbone = 14.1.3","retail_service_backbone = 15.0.3","retail_service_backbone = 16.0.3","retail_xstore_point_of_service = 15.0.4","retail_xstore_point_of_service = 16.0.6","retail_xstore_point_of_service = 17.0.4","retail_xstore_point_of_service = 18.0.3","retail_xstore_point_of_service = 19.0.2","storagetek_acsls = 8.5.1","storagetek_tape_analytics_sw_tool = 2.3","weblogic_server = 10.3.6.0.0","weblogic_server = 12.1.3.0.0","weblogic_server = 12.2.1.3.0","weblogic_server = 12.2.1.4.0","weblogic_server = 14.1.1.0.0","oncommand_insight","snap_creator_framework","snapcenter"],"patched":["spring_framework 5.2.9"],"published":"2020-09-19","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:30.567","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-5421","references":[{"url":"https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211%40%3Ccommits.pulsar.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865%40%3Cissues.hive.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec%40%3Ccommits.pulsar.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d%40%3Cuser.ignite.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb%40%3Cuser.ignite.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc%40%3Ccommits.pulsar.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d%40%3Cissues.hive.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665%40%3Cissues.hive.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e%40%3Cdev.ranger.apache.org%3E","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074%40%3Cdev.hive.apache.org%3E","label":"security@pivotal.io"},{"url":"https://security.netapp.com/advisory/ntap-20210513-0009/","label":"security@pivotal.io"},{"url":"https://tanzu.vmware.com/security/cve-2020-5421","label":"security@pivotal.io"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"security@pivotal.io"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"security@pivotal.io"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"security@pivotal.io"},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"security@pivotal.io"},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","label":"security@pivotal.io"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"security@pivotal.io"},{"url":"https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211%40%3Ccommits.pulsar.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865%40%3Cissues.hive.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec%40%3Ccommits.pulsar.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d%40%3Cuser.ignite.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb%40%3Cuser.ignite.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc%40%3Ccommits.pulsar.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d%40%3Cissues.hive.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665%40%3Cissues.hive.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e%40%3Cdev.ranger.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074%40%3Cdev.hive.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210513-0009/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tanzu.vmware.com/security/cve-2020-5421","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.10736,"epssPercentile":0.95722,"exploits":{"github":1,"githubRepos":["https://github.com/pandaMingx/CVE-2020-5421"],"checkedAt":"2026-10-08T22:12:29.996Z"},"exploitAvailable":true,"ingestedAt":"2026-10-08T22:11:53.721Z","slug":"CVE-2020-5421","body":"## Overview\n\nIn Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.\n\n## Affected\n\n- `spring_framework < 4.3.29`\n- `spring_framework >= 5.0.0, < 5.0.19`\n- `spring_framework >= 5.1.0, < 5.1.18`\n- `spring_framework >= 5.2.0, < 5.2.9`\n- `commerce_guided_search = 11.3.2`\n- `communications_brm = 11.3.0.9`\n- `communications_brm = 12.0.0.3`\n- `communications_design_studio = 7.3.4`\n- `communications_design_studio = 7.3.5`\n- `communications_design_studio = 7.4.0`\n- `communications_session_report_manager >= 8.2.1, <= 8.2.2.1`\n- `communications_unified_inventory_management = 7.3.4`\n- `communications_unified_inventory_management = 7.3.5`\n- `endeca_information_discovery_integrator = 3.2.0`\n- `enterprise_data_quality = 12.2.1.3.0`\n- `enterprise_data_quality = 12.2.1.4.0`\n- `financial_services_analytical_applications_infrastructure >= 8.0.6, <= 8.1.0`\n- `flexcube_private_banking = 12.0.0`\n- `flexcube_private_banking = 12.1.0`\n- `fusion_middleware = 12.2.1.3.0`\n- `fusion_middleware = 12.2.1.4.0`\n- `goldengate_application_adapters = 19.1.0.0.0`\n- `healthcare_master_person_index = 4.0.2.5`\n- `hyperion_infrastructure_technology = 11.1.2.4`\n- `insurance_policy_administration >= 11.1.0, <= 11.3.0`\n- `insurance_policy_administration = 10.2`\n- `insurance_policy_administration = 10.2.4`\n- `insurance_policy_administration = 11.0.2`\n- `insurance_rules_palette >= 11.1.0, <= 11.3.0`\n- `insurance_rules_palette = 10.2.0`\n- `insurance_rules_palette = 10.2.4`\n- `insurance_rules_palette = 11.0.2`\n- `mysql_enterprise_monitor <= 8.0.22`\n- `mysql_enterprise_monitor = 8.0.23`\n- `primavera_gateway >= 16.2.0, <= 16.2.11`\n- `primavera_gateway >= 17.12.0, <= 17.12.9`\n- `primavera_gateway >= 18.8.0, <= 18.8.10`\n- `primavera_gateway >= 19.12.0, <= 19.12.10`\n- `primavera_p6_enterprise_project_portfolio_management >= 16.1.0, <= 16.2.20`\n- `primavera_p6_enterprise_project_portfolio_management >= 17.1.0, <= 17.12.19`\n- `primavera_p6_enterprise_project_portfolio_management >= 18.1.0, <= 18.8.21`\n- `primavera_p6_enterprise_project_portfolio_management >= 19.12.0, <= 19.12.10`\n- `retail_assortment_planning = 16.0.3.0`\n- `retail_bulk_data_integration = 16.0.3.0`\n- `retail_customer_engagement >= 16.0, <= 19.0`\n- `retail_customer_management_and_segmentation_foundation >= 16.0, <= 19.0`\n- `retail_financial_integration = 14.1.3`\n- `retail_financial_integration = 15.0.3`\n- `retail_financial_integration = 16.0.3`\n- `retail_integration_bus = 14.1.3`\n- `retail_integration_bus = 15.0.3`\n- `retail_integration_bus = 16.0.3`\n- `retail_invoice_matching = 14.0`\n- `retail_invoice_matching = 14.1`\n- `retail_merchandising_system = 16.0.3`\n- `retail_order_broker = 15.0`\n- `retail_order_broker = 16.0`\n- `retail_predictive_application_server = 14.1`\n- `retail_returns_management = 14.1`\n- `retail_service_backbone = 14.1.3`\n- `retail_service_backbone = 15.0.3`\n- `retail_service_backbone = 16.0.3`\n- `retail_xstore_point_of_service = 15.0.4`\n- `retail_xstore_point_of_service = 16.0.6`\n- `retail_xstore_point_of_service = 17.0.4`\n- `retail_xstore_point_of_service = 18.0.3`\n- `retail_xstore_point_of_service = 19.0.2`\n- `storagetek_acsls = 8.5.1`\n- `storagetek_tape_analytics_sw_tool = 2.3`\n- `weblogic_server = 10.3.6.0.0`\n- `weblogic_server = 12.1.3.0.0`\n- `weblogic_server = 12.2.1.3.0`\n- `weblogic_server = 12.2.1.4.0`\n- `weblogic_server = 14.1.1.0.0`\n- `oncommand_insight`\n- `snap_creator_framework`\n- `snapcenter`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `spring_framework 5.2.9`","depth":"twilight","depthScore":50,"depthScoreParts":{"impact":35.8,"likelihood":2.1,"exploitation":12,"ransomware":0},"changes":[]}