REPORT-115463 springframework CVE-2024-22243 漏洞

9 months ago · 676a156dc8
1 changed files with 1 additions and 1 deletions
--- a/fine-spring/src/main/java/com/fr/third/springframework/web/util/UriComponentsBuilder.java
+++ b/fine-spring/src/main/java/com/fr/third/springframework/web/util/UriComponentsBuilder.java
@ -66,7 +66,7 @@ public class UriComponentsBuilder implements Cloneable {

 	private static final String HTTP_PATTERN = "(?i)(http|https):";

-	private static final String USERINFO_PATTERN = "([^@\\[/?#]*)";
+	private static final String USERINFO_PATTERN = "([^@/?#]*)";

 	private static final String HOST_IPV4_PATTERN = "[^\\[/?#:]*";