ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12, <=0.1.20) +25650 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=5.0.0.release, <=5.2.23.release)

org.springframework:spring-expression MAVEN version =5.0.0.release, =4.4.0.0, =0.1.12, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.5, =0.0.12, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.51 and more Source cves: CVE-2023-20863 Source advisory: OSV:GHSA-WXQC-PXW9-G2P8...

ai.superstream:spring-kafka (3.0.1-alpha1), am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5) +4359 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=6.0.0, <=6.0.7)

org.springframework:spring-expression MAVEN version =6.0.0, =0.1.0, =0.1.0, =0.1.0, =4.5.0-beta.1, =3.0.0, =2.9.9-rc.2, =0.25.3-rc.11, =0.1.43, =1.1.0, =1.1.0, =1.1.1 - cc.vihackerframework:vihacker-annotation 1.0.8.r - cc.vihackerframework:vihacker-auth-starter 1.0.8.r and more Source cves:...

ai.superstream:spring-kafka (3.0.1-alpha1), am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5) +4359 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=6.0.0, <=6.0.7)

org.springframework:spring-expression MAVEN version =6.0.0, =0.1.0, =0.1.0, =0.1.0, =4.5.0-beta.1, =3.0.0, =2.9.9-rc.2, =0.25.3-rc.11, =0.1.43, =1.1.0, =1.1.0, =1.1.1 - cc.vihackerframework:vihacker-annotation 1.0.8.r - cc.vihackerframework:vihacker-auth-starter 1.0.8.r and more Source cves:...

DEBIAN-CVE-2023-20863

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service DoS condition...

UBUNTU-CVE-2023-20863

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service DoS condition...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +23491 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=5.3.0, <=5.3.26)

org.springframework:spring-expression MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2023-20863 Source advisory: MEND:CVE-2023-20863...

ai.superstream:spring-kafka (3.0.1-alpha1), am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5) +4359 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=6.0.0, <=6.0.7)

org.springframework:spring-expression MAVEN version =6.0.0, =0.1.0, =0.1.0, =0.1.0, =4.5.0-beta.1, =3.0.0, =2.9.9-rc.2, =0.25.3-rc.11, =0.1.43, =1.1.0, =1.1.0, =1.1.1 - cc.vihackerframework:vihacker-annotation 1.0.8.r - cc.vihackerframework:vihacker-auth-starter 1.0.8.r and more Source cves:...

Spring Framework DoS

The vulnerability of the Spring Framework software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially created SpEL expressions...

be.jacobsvanroy:spring-sql-unit (>=0.7, <=0.8), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2) +96 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.0.release)

org.springframework:spring-expression MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.jacobsvanroy:spring-sql-unit =0.7, =1.2.1, =1.2.10, =1.0.0, =1.0-27,...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), fr.figarocms:web-debug-tag (>=0.0.1, <=1.0) +57 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.1.release)

org.springframework:spring-expression MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...

br.com.tecsinapse:glimpse-server (>=1.1.1, <=1.1.2), com.alexkasko.springjdbc.typedqueries:typed-queries-codegen (>=1.0, <=1.4.4) +89 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.2.release)

org.springframework:spring-expression MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.tecsinapse:glimpse-server =1.1.1, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0.0...

ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.enigmastation:ci-bayes (2.0.0.release) +296 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.3.release)

org.springframework:spring-expression MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =4.0.0, =22.0.2-beta, =1.0.0-beta-1, =3.0....

at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2), ca.grimoire.spring:spring-request-aware (1.0) +232 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.4.release)

org.springframework:spring-expression MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-1, =1.0.2, =1.1.1, =1.0.3, =1.0.1,...

be.eliwan:ew-profiling-api (>=1.0, <=1.4), be.eliwan:ew-profiling-core (>=1.0, <=1.4) +1251 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.5.release)

org.springframework:spring-expression MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.eliwan:ew-profiling-api =1.0, =1.0, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2,...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.27), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +679 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.7.release)

org.springframework:spring-expression MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ar.com.jmfsg:api-doc =0.0.20, =0.3.3, =1.0.14, =1.0, =3.0.10, =3.0.10, =3.0.1...

br.com.uol.reconf:reconf-spring (>=1.0.4, <=1.4.0), co.jirm:jirm-spring (>=0.0.1, <=0.0.8) +392 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.1.0.release)

org.springframework:spring-expression MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.uol.reconf:reconf-spring =1.0.4, =0.0.1, =1.1, =1.2, =1.1, =0.9.0,...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +456 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.1.1.release)

org.springframework:spring-expression MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.hsr.mas.oms-financialanalyzer:indicators 1.2.0 -...

biz.paluch.redis:lettuce (>=3.0.beta1, <=4.0.beta1), biz.paluch.redis:spinach (>=0.1, <=0.3) +326 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.1.4.release)

org.springframework:spring-expression MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - biz.paluch.redis:lettuce =3.0.beta1, =0.1, =1.0.0, =2.0.0-rc1, =1.5, =0.0.1,...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (>=0.1.1, <=0.1.2) +175 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.2.0.release)

org.springframework:spring-expression MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1, =0.4.0, =0.0.1, =0.0.1, =0.0.1,...

ch.inftec.ju:ju-dbutil-test-legacy (4.1), ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1) +171 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.2.1.release)

org.springframework:spring-expression MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.inftec.ju:ju-dbutil-test-legacy 4.1 - ch.ralscha:extdirectspring =1.3.0,...