Skip to content
Fencer Vulns
medium 6.5

CVE-2025-41234 json

RFD Attack via “Content-Disposition” Header Sourced from Request

published 2025-06-12 16 mo ago modified 2026-09-10 1 mo ago also GHSA-6r3c-xf4w-jxjm , EUVD-2025-18218

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

Description

In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download (RFD) attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input.

Specifically, an application is vulnerable when all the following are true:

* The header is prepared with org.springframework.http.ContentDisposition. * The filename is set via ContentDisposition.Builder#filename(String, Charset). * The value for the filename is derived from user-supplied input. * The application does not sanitize the user-supplied input. * The downloaded content of the response is injected with malicious commands by the attacker (see RFD paper reference for details).

An application is not vulnerable if any of the following is true:

* The application does not set a “Content-Disposition” response header. * The header is not prepared with org.springframework.http.ContentDisposition. * The filename is set via one of: * ContentDisposition.Builder#filename(String), or * ContentDisposition.Builder#filename(String, ASCII)

* The filename is not derived from user-supplied input. * The filename is derived from user-supplied input but sanitized by the application. * The attacker cannot inject malicious content in the downloaded content of the response.

Affected Spring Products and VersionsSpring Framework:

* 6.2.0 - 6.2.7 * 6.1.0 - 6.1.20 * 6.0.5 - 6.0.28 * Older, unsupported versions are not affected

MitigationUsers of affected versions should upgrade to the corresponding fixed version.

Affected version(s)Fix versionAvailability6.2.x6.2.8OSS6.1.x6.1.21OSS6.0.x6.0.29 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.

CWE-113 in `Content-Disposition` handling in VMware Spring Framework versions 6.0.5 to 6.2.7 allows remote attackers to launch Reflected File Download (RFD) attacks via unsanitized user input in `ContentDisposition.Builder#filename(String, Charset)` with non-ASCII charsets.

Patch / fix

  • maven org.springframework:spring-web 6.1.21, 6.2.8
  • VMware Spring Framework 6.0.29, 6.1.21, 6.2.8

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-41234 updated cvss 6.5

springframework: Reflected download attack in Spring Framework with non-ASCII headers

  • Red Hat OpenShift Developer Tools and Services jenkins Red Hat AMQ Broker 7 spring-web Red Hat build of Apache Camel - HawtIO 4 spring-web Red Hat build of Apache Camel 4 for Quarkus 3 quarkus-cxf-bom, quarkus-camel-bom Red Hat build of Apache Camel for Spring Boot 4 spring-web Red Hat Data Grid 8 spring-web
    +9 more products
    Red Hat Enterprise Linux 7 xbean, xbean-javadoc Red Hat Enterprise Linux 8 log4j, xbean, resteasy, log4j-jcl, log4j-web, log4j-slf4j, +2 more Red Hat Enterprise Linux 9 log4j, xbean, resteasy, log4j-jcl, log4j-slf4j, pki-resteasy-core, +3 more Red Hat Fuse 7 spring-web Red Hat Integration Camel K 1 spring-web Red Hat JBoss Enterprise Application Platform 7 spring-web Red Hat JBoss Enterprise Application Platform 8 spring-web Red Hat JBoss Enterprise Application Platform Expansion Pack spring-web Red Hat streams for Apache Kafka spring-web
    affected: workaround, no fix available “Fix deferred”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
16 mo ago

Exploit prediction

0.61% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
GitHub 3.1 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Affected packages

ecosystem package affected fixed in
maven org.springframework:spring-web
>=6.2.0, <6.2.8
>=6.1.0, <6.1.21
>=6.0.5, <=6.0.23
6.2.8
6.1.21

Affected products

  • VMware Spring Framework

Classification

Weakness
  • CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.