Lucene search
GoogleOSV:CVE-2023-34055HistoryNov 28, 2023 - 9:15 a.m.
CVE-2023-34055
2023-11-2809:15:07
Google
osv.dev
8
spring boot
dos attack
http requests
spring mvc
spring webflux
actuator
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
9.8%
In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.
Specifically, an application is vulnerable when all of the following are true:
- the application uses Spring MVC or Spring WebFlux
- org.springframework.boot:spring-boot-actuator is on the classpath
Related
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Boot arbitrary denial of service vulnerability ( CVE-2023-34055)
2024-02-13 14:49:17
cve
cve
CVE-2023-34055
2023-11-28 09:15:07
osv
osv
Spring Boot Actuator denial of service vulnerability
2023-11-28 09:30:27
redhatcve
redhatcve
CVE-2023-34055
2023-11-28 13:28:20
cvelist
cvelist
CVE-2023-34055 Spring Boot server Web Observations DoS Vulnerability
2023-11-28 08:27:25
prion
prion
Design/Logic Flaw
2023-11-28 09:15:00
nvd
nvd
CVE-2023-34055
2023-11-28 09:15:07
github
github
Spring Boot Actuator denial of service vulnerability
2023-11-28 09:30:27
veracode
veracode
Denial Of Service (DoS)
2023-11-29 07:59:37
openvas
openvas
spring
spring
This Week in Spring - 28 November, 2023
2023-11-28 00:00:00
redhat
redhat
(RHSA-2024:3354) Important: Red Hat Fuse 7.13.0 release and security update
2024-05-23 22:44:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
9.8%
Related for OSV:CVE-2023-34055