CVE Intelligence

Maven Org.springframework:spring-expression vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.springframework:spring-expression: 1 record(s), with affected versions and fixes.

CVE-2022-22950 Medium · 6.5 CWE-770 Apr 1, 2022
Allocation of Resources Without Limits or Throttling in Spring Framework
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.