22 matches found
CVE-2022-22968: Improper Handling of Case Sensitivity
In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...
5.3CVSS6.7AI score0.05666EPSS
SaveExploits2References2
Vmware Spring Framework 安全特征问题漏洞
Vmware Spring Framework is the United States, Vmware Vmware company's set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. Vmware Spring Framework has a security feature issue vulnerability that stems from the pattern of...
5.3CVSS6.8AI score0.05666EPSS
SaveExploits2References17
20