6 matches found
GHSA-9F52-RJQV-25QV Spring Framework Arbitrary Method Invocation in SpEL Expressions
A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2....
3.7CVSS7.1AI score0.00177EPSS
SaveExploits0References5
20