Lucene search
VmwareCVELIST:CVE-2022-22950HistoryApr 01, 2022 - 10:17 p.m.
CVE-2022-22950
2022-04-0122:17:32
CWE-770
vmware
www.cve.org
2
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
CNA Affected
[
{
"product": "Spring Framework",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions"
}
]
}
]References
Related
spring
spring
CVE report published for Spring Framework
2022-03-28 08:00:00
ibm
ibm
cve
cve
CVE-2022-22950
2022-04-01 23:15:13
debiancve
debiancve
CVE-2022-22950
2022-04-01 23:15:13
veracode
veracode
Denial Of Service (DoS)
2022-04-07 12:06:55
prion
prion
Race condition
2022-04-01 23:15:00
github
github
Allocation of Resources Without Limits or Throttling in Spring Framework
2022-04-03 00:01:00
osv
osv
CVE-2022-22950
2022-04-01 23:15:13
Allocation of Resources Without Limits or Throttling in Spring Framework
2022-04-03 00:01:00
nvd
nvd
CVE-2022-22950
2022-04-01 23:15:13
nessus
nessus
Spring Framework < 5.2.20 / 5.3.x < 5.3.17 DoS (CVE-2022-22950)
2022-06-08 00:00:00
Dell EMC NetWorker < 19.8 DoS (DSA-2022-350)
2022-12-13 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.1] (RHSA-2022:5555)
2022-07-15 00:00:00
broadcom
broadcom
openvas
openvas
VMware Spring Framework < 5.2.20, 5.3.x < 5.3.17 DoS Vulnerability - Linux
2022-04-06 00:00:00
VMware Spring Framework < 5.2.20, 5.3.x < 5.3.17 DoS Vulnerability - Windows
2022-04-06 00:00:00
redhatcve
redhatcve
CVE-2022-22950
2022-03-28 21:07:31
ubuntucve
ubuntucve
CVE-2022-22950
2022-04-01 00:00:00
ics
ics
thn
thn
f5
f5
cert
cert
rapid7blog
rapid7blog
Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)
2022-03-30 22:33:54
redhat
redhat
checkpoint_security
checkpoint_security
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00