A vulnerability identified as critical has been detected in VMware Spring AI up to 1.0.4/1.1.3. This affects an unknown part of the component Multimodal Message Handler. Performing a manipulation results in server-side request forgery. The attack is possible to be carried out remotely.
| Vendor | Product | Versions |
|---|---|---|
| spring | spring ai | 1.0.0, 1.1.0, 1.0.4, 1.1.3 |
Updated vendor to VMware, product details, affected versions, severity to CRITICAL, and noted that no exploit exists.
Initial creation
