club.zhcs:axe-apm (>=1.5.13, <=1.5.13.2), club.zhcs:axe-sigar (>=1.5.13, <=1.5.13.2) +608 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.13.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - club.zhcs:axe-apm =1.5.13, =1.5.13, =1.5.13,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.5.19, <=3.5.24), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.19, <=3.6.0-rc.0) +737 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.14.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.5.19,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), ai.houyi:dorado (>=0.0.6, <=0.0.8) +105 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.15.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-start...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +262 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.19.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop...

cn.com.365trade.oss:xxl-job-admin (>=2.2.1_zzlh, <=2.2.1.1_zzlh), cn.hippo4j:hippo4j-config-spring-boot-1x-starter (>=1.4.2, <=1.5.0) +390 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.22.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - cn.com.365trade.oss:xxl-job-admin =2.2.1zzlh,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +660 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.4.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0, =1.0, =1.0....

com.gitee.lwydyby:wwmxd-log (>=1.0-release, <=1.0.9-release), com.ifrabbit:spring-boot-starter-data-mybatis (1.0.17.release) +66 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.5.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - com.gitee.lwydyby:wwmxd-log =1.0-release, =0.12.0,...

ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigure (>=3.1.0, <=3.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-starter (>=3.1.0, <=3.6.0) +798 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.6.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigur...

am.ik.blog:blog-domain (>=4.2.1, <=4.3.6), am.ik.blog:blog-mapper (>=4.4.1, <=4.5.0) +925 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.7.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - am.ik.blog:blog-domain =4.2.1, =4.4.1, =0.2.13,...

cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1), cn.dubby:dubby_blog (>=1.2, <=1.4) +1440 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.8.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.1, =1.2...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), cn.bestwu:starter-logging (>=0.1.6-v1, <=1.0.0) +847 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.10.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: -...

com.fastjrun.codeg.apibase:sdkg-apibase-provider (>=3.1, <=3.2.4), com.fastjrun.codeg.example:sdkg-example-provider (>=2.1, <=3.0) +178 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.11.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - com.fastjrun.codeg.apibase:sdkg-apibase-provider...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +339 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.16.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - au.com.dius.pact.provider:spring =4.1.0,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.alipay.sofa:registry-server-data (>=5.2.0, <=5.4.3) +164 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.17.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-start...

com.alibaba.boot:dubbo-spring-boot-starter (0.1.2.release), com.foreach.across:across-core (3.1.2.release) +219 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.18.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - com.alibaba.boot:dubbo-spring-boot-starter...

cn.skylarkai:license (>=1.0.0, <=1.0.2), com.eworkcloud:ework-cloud-starter-web (>=1.0.0, <=1.8.1) +172 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.20.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: - cn.skylarkai:license =1.0.0, =1.0.0, =3.1.1.releas...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure (1.0.2), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +244 more potentially affected by CVE-2023-20883 via org.springframework.boot:spring-boot-autoconfigure (1.5.21.release)

org.springframework.boot:spring-boot-autoconfigure MAVEN version 1.5.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-autoconfigure and may be impacted: -...

CVE-2023-20883

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service DoS attack if Spring MVC is used together with a reverse proxy cache...

CVE-2023-20883

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service DoS attack if Spring MVC is used together with a reverse proxy cache...

Default configuration

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service DoS attack if Spring MVC is used together with a reverse proxy cache...