Lucene search

Allocation of Resources Without Limits or Throttling in Spring Framework

🗓️ 03 Apr 2022 00:00:01Reported by GoogleType

osv🔗 osv.dev👁 223 Views

Allocation of Resources Without Limits in Spring Framewor

Reporter	Title	Published	Views	Family All 58
Spring Engineering	CVE report published for Spring Framework	28 Mar 202208:00	–	spring
IBM Security Bulletins	Security Bulletin: A VMWare Tanzu Spring Vulerability Affects IBM OpenPages with Watson (CVE-2022-22950)	28 Jul 202316:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22950, XFID:217968)	13 May 202217:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation with Spring Framework (CVE-2022-22950).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected but not classified as vulnerable to a denial of service in Spring Framework (CVE-2022-22950)	6 May 202223:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected but not classified as vulnerable to a denial of service in Spring Framework (CVE-2022-22950)	6 May 202223:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to improper input validation in Spring Framework (CVE-2022-22950)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: [All] Spring Framework - CVE-2022-22950 (Publicly disclosed vulnerability)	6 Jun 202304:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Monitoring is affected but not classified as vulnerable by a denial of service in Spring Framework (CVE-2022-22950)	30 Dec 202217:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Spring Framework (CVE-2021-22096, CVE-2022-22950)	14 Oct 202221:50	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22950
github	www.github.com/spring-projects/spring-framework/issues/28145
github	www.github.com/spring-projects/spring-framework/issues/28257
github	www.github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11
github	www.github.com/spring-projects/spring-framework
github	www.github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
github	www.github.com/spring-projects/spring-framework/releases/tag/v5.3.17
tanzu	www.tanzu.vmware.com/security/cve-2022-22950

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Apr 2022 00:01Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.001