{"action":"Upgrade org.springframework:spring-context to 5.2.21.RELEASE (5.2.x) or 5.3.19 (5.3.x) or later.","affected":[{"fixed":"5.3.19","introduced":"5.3.0"},{"fixed":"5.2.21.RELEASE","introduced":"0"}],"component":"org.springframework:spring-context","cve_ids":["CVE-2022-22968"],"ecosystem":"Maven","epss":0.05666,"exploited":false,"fixed_versions":["5.3.19","5.2.21.RELEASE"],"ghsa_id":"GHSA-g5mm-vmx4-3rg7","id":"tcs_01M5N8XEFW7D0PG3ZF7F6JQZJ1","modified_at":"2024-05-15T06:31:39.948317Z","published_at":"2022-04-15T00:00:32Z","references":["https://osv.dev/vulnerability/GHSA-g5mm-vmx4-3rg7","https://nvd.nist.gov/vuln/detail/CVE-2022-22968","https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea","https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7","https://github.com/spring-projects/spring-framework","https://security.netapp.com/advisory/ntap-20220602-0004","https://tanzu.vmware.com/security/cve-2022-22968","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g5mm-vmx4-3rg7","url":"https://osv.dev/vulnerability/GHSA-g5mm-vmx4-3rg7"}],"summary":"Improper handling of case sensitivity in Spring Framework"}