Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-20863HistoryApr 13, 2023 - 8:15 p.m.
CVE-2023-20863
2023-04-1320:15:07
Debian Security Bug Tracker
security-tracker.debian.org
17
cve-2023-20863
denial-of-service
spel expression
spring framework
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
70.0%
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libspring-java | <= 4.3.30-2 | libspring-java_4.3.30-2_all.deb |
| Debian | 11 | all | libspring-java | <= 4.3.30-1 | libspring-java_4.3.30-1_all.deb |
| Debian | 10 | all | libspring-java | <= 4.3.22-4 | libspring-java_4.3.22-4_all.deb |
| Debian | 999 | all | libspring-java | <= 4.3.30-2 | libspring-java_4.3.30-2_all.deb |
| Debian | 13 | all | libspring-java | <= 4.3.30-2 | libspring-java_4.3.30-2_all.deb |
Related
ubuntucve
ubuntucve
CVE-2023-20863
2023-04-13 00:00:00
nvd
nvd
CVE-2023-20863
2023-04-13 20:15:07
broadcom
broadcom
Spring Expression DoS Vulnerability (CVE-2023-20863)
2024-04-16 00:00:00
redhatcve
redhatcve
CVE-2023-20863
2023-04-18 15:31:05
openvas
openvas
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework denial of service vulnerabilitiy [CVE-2023-20863]
2023-07-20 16:39:20
veracode
veracode
Denial Of Service (DoS)
2023-04-18 07:02:49
osv
osv
CVE-2023-20863
2023-04-13 20:15:07
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
cve
cve
CVE-2023-20863
2023-04-13 20:15:07
github
github
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
cvelist
cvelist
CVE-2023-20863
2023-04-13 00:00:00
prion
prion
Race condition
2023-04-13 20:15:00
redhat
redhat
nessus
nessus
Oracle Primavera Gateway (Jul 2023 CPU)
2023-07-19 00:00:00
Oracle MySQL Enterprise Monitor (October 2023 CPU)
2023-10-19 00:00:00
Oracle WebLogic Server (July 2023 CPU)
2023-07-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
70.0%
Related for DEBIANCVE:CVE-2023-20863