CVE-2022-22971

2022-05-1219:30:49

CWE-770

vmware

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.1%

JSON

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

CNA Affected

[
  {
    "product": "Spring Framework",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Framework versions 5.3.x prior to 5.3.20, 5.2.x prior to 5.2.22 and all old and unsupported versions"
      }
    ]
  }
]