Lucene search
Broadcom Security ResponseBSNSA23261HistoryApr 16, 2024 - 12:00 a.m.
Spring Expression DoS Vulnerability (CVE-2023-20861)
2024-04-1600:00:00
Broadcom Security Response
support.broadcom.com
7
spring
framework
vulnerability
cve-2023-20861
dos
denial-of-service
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| brocade sannav | lt | 2.3.0a |
Related
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)
2023-06-28 20:44:09
cve
cve
CVE-2023-20861
2023-03-23 21:15:19
ubuntucve
ubuntucve
CVE-2023-20861
2023-03-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-03-27 22:04:35
osv
osv
CVE-2023-20861
2023-03-23 21:15:19
prion
prion
Race condition
2023-03-23 21:15:00
f5
f5
K000134681 : Spring Framework vulnerability CVE-2023-20861
2023-05-19 00:00:00
github
github
nessus
nessus
RHEL 8 : Red Hat Virtualization (RHSA-2023:3771)
2023-06-22 00:00:00
Oracle Identity Manager (Jul 2023 CPU)
2023-07-21 00:00:00
debiancve
debiancve
CVE-2023-20861
2023-03-23 21:15:19
redhatcve
redhatcve
CVE-2023-20861
2023-03-24 13:07:29
CVE-2023-20860
2023-03-24 13:07:33
openvas
openvas
spring
spring
This Week in Spring - March 21st, 2023
2023-03-21 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00