CVE-2022-22979

2022-06-2115:15:08

Google

osv.dev

0.001 Low

EPSS

Percentile

38.5%

JSON

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.

CPENameOperatorVersion
spring-cloud-functioneq3.0.1.RELEASE
spring-cloud-functioneq2.0.0.M1
spring-cloud-functioneq1.0.0.M2
spring-cloud-functioneq1.0.0.M4
spring-cloud-functioneq2.0.0.M4
spring-cloud-functioneq2.1.0.RC1
spring-cloud-functioneq3.0.2.RELEASE
spring-cloud-functioneq1.0.0.RELEASE
spring-cloud-functioneq2.0.0.RC3
spring-cloud-functioneq3.2.0-M1

Name	Operator	Version
spring-cloud-function	eq	3.0.1.RELEASE
spring-cloud-function	eq	2.0.0.M1
spring-cloud-function	eq	1.0.0.M2
spring-cloud-function	eq	1.0.0.M4
spring-cloud-function	eq	2.0.0.M4
spring-cloud-function	eq	2.1.0.RC1
spring-cloud-function	eq	3.0.2.RELEASE
spring-cloud-function	eq	1.0.0.RELEASE
spring-cloud-function	eq	2.0.0.RC3
spring-cloud-function	eq	3.2.0-M1