[CVE-2026-47850] Spring Data REST does not preserve the persisted version (@V

CVE-2026-47850 | CVSS: 4.3 | 严重级别: MEDIUM

Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type.
Spring Data REST 5.1.0
Spring Data REST 5.0.0 – 5.0.6
Spring Data REST 4.5.0 – 4.5.12
Spring Data REST 4.0.0 – 4.4.15
Spring Data REST 3.7.20 and earlier

参考链接:
https://spring.io/security/cve-2026-47850

📌 数据来源: NVD 官方

⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。
滚动至顶部