CVE-2023-34053

🗓️ 28 Nov 2023 13:28:10Reported by redhat.comType

In Spring Framework 6.0.0 - 6.0.13, crafted HTTP requests can cause denial-of-service (DoS). Require Spring MVC/WebFlux, micrometer-core, and ObservationRegistry

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Boot arbitrary denial of service vulnerability ( CVE-2023-34053)	20 Jun 202418:41	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Boot arbitrary denial of service vulnerability ( CVE-2023-34053)	20 Jun 202418:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in VMware Tanzu Spring Framework affects IBM Process Mining CVE-2023-34053	29 Mar 202410:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Spring Framework (CVE-2023-34053)	20 Mar 202401:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	16 Feb 202408:48	–	ibm
BDU FSTEC	The vulnerability of the Spring Framework software platform, related to unlimited resource distribution, allows attackers to trigger service failures.	24 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-34053	17 Dec 202317:12	–	circl
CNNVD	Spring Framework Security Vulnerabilities	27 Nov 202300:00	–	cnnvd