CVE-2022-22971
1 advisory.
Maven/org.springframework:spring-messaging CVE-2022-22971: medium 6.5
Allocation of Resources Without Limits or Throttling in Spring Framework
Action: Upgrade org.springframework:spring-messaging to 5.2.22.RELEASE (5.2.x) or 5.3.20 (5.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.20 | - |
| 0 | 5.2.22.RELEASE | - |
Fixed versions
| 5.3.20 | 5.2.22.RELEASE |
Sources
- osv: GHSA-rqph-vqwm-22vc
- https://nvd.nist.gov/vuln/detail/CVE-2022-22971
- https://github.com/spring-projects/spring-framework/commit/159a99bbafdd6c01871228113d7042c3f83f360f
- https://github.com/spring-projects/spring-framework/commit/dc2947c52df18d5e99cad03383f7d6ba13d031fd
- https://github.com/spring-projects/spring-framework
- https://security.netapp.com/advisory/ntap-20220616-0003
- https://tanzu.vmware.com/security/cve-2022-22971
- https://www.oracle.com/security-alerts/cpujul2022.html
CVE-2022-22971 · published · modified · JSON