ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +1617 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.10.release)

org.springframework:spring-expression MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

at.molindo.social:spring-social-security (1.1.4.release), cc.ecore:spring-jfinal (0.0.1) +145 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (3.2.13.release)

org.springframework:spring-expression MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-security 1.1.4.release -...

cn.wizzer.app:wk-common (>=5.1.5, <=5.2.8-zookeeper), cn.wizzer.app:wk-nb-service-cms (>=5.1.5, <=5.2.8-zookeeper) +347 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.21.release)

org.springframework:spring-expression MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.wizzer.app:wk-common =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.5,...

br.com.thiagomoreira.replicon:replicon4j (>=0.1, <=1.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.6) +469 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.0.6.release)

org.springframework:spring-expression MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.thiagomoreira.replicon:replicon4j =0.1, =3.0.3, =3.0.3, =3.0.3, =3.0.5...

ar.com.onready:spring-resttemplate-logger (1.0.2), br.com.ledgertec:rap-conector-client (>=0.9.0-1, <=1.0.0) +261 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.0.0.release)

org.springframework:spring-expression MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ar.com.onready:spring-resttemplate-logger 1.0.2 -...

com.github.skeychen:dswork-common-ssosdk (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1) +127 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.28.release)

org.springframework:spring-expression MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.skeychen:dswork-common-ssosdk =9.0.1, =9.0.1, =9.0.1, =9.0.1,...

cn.jairdavis:jair-common-utils (1.0.4), com.allenru:cross-origin (1.0.1) +171 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.0.2.release)

org.springframework:spring-expression MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.allenru:cross-origin 1.0.1 -...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +663 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.19.release)

org.springframework:spring-expression MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =0.0.1,...

ch.ralscha:extdirectspring (1.6.1), cn.vonce:vonce-common (>=1.0.0, <=1.0.3) +337 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.2.2.release)

org.springframework:spring-expression MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring 1.6.1 - cn.vonce:vonce-common =1.0.0, =0.9.6,...

at.molindo.social:spring-social-security (1.1.0.release), cc.fozone.validation:fo-validation (>=0.9.0.release, <=0.9.1.release) +489 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (3.2.8.release)

org.springframework:spring-expression MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release -...

ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +241 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (3.2.2.release)

org.springframework:spring-expression MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.0, =1.6.0, =2.100.0, =2.0.2, =2.0....

com.blogspot.ostas:jamaexamplewebapp (>=1.0.1, <=1.0.2), com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2) +439 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (3.2.3.release)

org.springframework:spring-expression MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.blogspot.ostas:jamaexamplewebapp =1.0.1, =1.0, =1.0.0, =1.0.1, =1.2.1 and...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1117 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.4.release)

org.springframework:spring-expression MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0....

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.coherentlogic.coherent.data-model:data-model-core (>=1.0.13-release, <=1.0.14-release) +89 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.0.1.release)

org.springframework:spring-expression MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.13-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +348 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.1.release)

org.springframework:spring-expression MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12, <=0.1.20) +25351 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (>=5.0.0.release, <=5.2.19.release)

org.springframework:spring-expression MAVEN version =5.0.0.release, =4.4.0.0, =0.1.12, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.5, =0.0.12, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.51 and more Source cves: CVE-2022-22950 Source advisory: GHSA-558X-2XJG-6232...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +716 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.2.3.release)

org.springframework:spring-expression MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter =0.1.6,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +195 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.2.0.release)

org.springframework:spring-expression MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =1.0.0,...

CVE-2022-22950

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition...