Lucene search
+L

121 matches found

Spring Security Advisories
Spring Security Advisories
added 2023/03/02 12:0 a.m.190 views

Spring Cloud Function for Azure Function

What is the Spring Cloud Function? Spring Cloud Function is a SpringBoot-based framework allowing users to concentrate on their business logic by implementing them as Java Functions i.e., Supplier, Function, Consumer. In turn the framework provides necessary abstraction to enable execution of the...

0.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/02/24 12:0 a.m.24 views

Spring Cloud Function for Azure Function

What is the Spring Cloud Function? Spring Cloud Function is a SpringBoot-based framework allowing users to concentrate on their business logic by implementing them as Java Functions i.e., Supplier, Function, Consumer. In turn the framework provides necessary abstraction to enable execution of the...

0.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.8 views

SUSE CVE-2022-22963

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources...

9.8CVSS9AI score0.99939EPSS
SaveExploits36References3
GithubExploit
GithubExploit
added 2023/01/15 9:39 p.m.263 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 Exploit Description In Spring Cloud Funct...

9.8CVSS9.7AI score0.99939EPSS
SaveExploits36
GithubExploit
GithubExploit
added 2022/10/29 3:28 a.m.495 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

SpringAllReachable A graphical tool for rapid exploitati...

10CVSS7.9AI score0.99939EPSS
SaveExploits86
VulnCheck KEV
VulnCheck KEV
added 2022/08/19 12:0 a.m.13 views

VulnCheck KEV: CVE-2022-22963

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources...

9.8CVSS7.8AI score0.99939EPSS
SaveExploits36References1
Github Security Blog
Github Security Blog
added 2022/06/22 12:0 a.m.30 views

Denial of Service in Spring Cloud Function

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

7.5CVSS3.6AI score0.0127EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/06/21 3:15 p.m.28 views

CVE-2022-22979

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

7.5CVSS0.0127EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/21 3:15 p.m.8 views

CVE-2022-22979

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

7.5CVSS6.7AI score0.0127EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/21 3:15 p.m.21 views

Race condition

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

5CVSS7.4AI score0.0127EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/21 2:23 p.m.41 views

CVE-2022-22979

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

8.1AI score0.0127EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/21 2:23 p.m.122 views

CVE-2022-22979

CVE-2022-22979 affects Spring Cloud Function Framework (Function Catalog) where a caching issue can allow a denial-of-service condition when a user directly interacts with framework-provided lookup functionality. Affected versions include Spring Cloud Function Framework 4.1.x prior to 4.1.2 and 4...

7.5CVSS7.3AI score0.0127EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/06/21 2:23 p.m.18 views

CVE-2022-22979

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework...

7.4AI score
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.9 views

Spring Cloud 安全漏洞

Spring Cloud is a microservices framework implemented in Spring Boot by the Spring community. A security vulnerability exists in Spring Cloud Function versions prior to 3.2.6, which stems from a caching issue in the Function Catalog component and is exploited by an attacker to cause a denial of...

7.5CVSS6.7AI score0.0127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/06/21 12:0 a.m.7 views

PT-2022-7238 · Unknown · Spring Cloud Function

Name of the Vulnerable Software and Affected Versions: Spring Cloud Function versions prior to 3.2.6 Description: The issue is related to a caching problem in the Function Catalog component, which can cause a denial-of-service condition when a user directly interacts with the framework's lookup...

8.2CVSS7.2AI score0.0127EPSS
SaveExploits0References16
Veracode
Veracode
added 2022/06/16 4:24 a.m.30 views

Denial Of Service (DoS)

spring-cloud-function-context is denial of service. An attacker who directly interacts with framework can send malicious payload to the lookup function, triggering a caching issue in Function Catalog component of the framework and crashing the application...

7.5CVSS7.3AI score0.0127EPSS
SaveExploits0References3Affected Software1
Spring Security Advisories
Spring Security Advisories
added 2022/06/16 12:8 a.m.35 views

CVE report published for Spring Cloud Function

We have released Spring Cloud Function 3.2.6 to address the following CVE report. CVE-2202-22979: Spring Cloud Function Dos Vulnerability Please review the information in the CVE report and upgrade immediately...

5CVSS2.3AI score0.0127EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2022/06/15 12:0 a.m.9 views

Spring Cloud Function Dos Vulnerability

In Spring Cloud Function versions 3.2.5 and older unsupported versions, it is possible for a user who directly interacts with framework provided lookup functionality to cause denial of service condition due to the caching issue in Function Catalog component of the framework. At the time of writin...

7.5CVSS6.6AI score0.0127EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
added 2022/05/17 11:5 p.m.80 views

This Week in Spring - May 17th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc. A Bootiful Podcast: EasyMock contributor...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2022/04/14 11:10 a.m.543 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

Spring Cloud Function SpEL Expression Injection Vulnerability...

9.8CVSS7.7AI score0.99939EPSS
SaveExploits36
Rows per page
Query Builder