br.jus.stf.digital:core (>=2.0.0, <=2.3.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.4, <=2.5) +325 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.7.release)

org.springframework:spring-messaging MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - br.jus.stf.digital:core =2.0.0, =2.4, =1.1.0, =1.1.0, =1.0.1-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.9-release) +58 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.1.release)

org.springframework:spring-messaging MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =1.1.4-release, =1.1.4-release,...

com.ahome-it:ahome-tooling-server-core (1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release) +21 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.0.release)

org.springframework:spring-messaging MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.109-release -...

ai.superstream:spring-kafka (>=2.8.4-alpha1, <=2.8.4-alpha6), biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.5) +2369 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=5.3.0, <=5.3.19)

org.springframework:spring-messaging MAVEN version =5.3.0, =2.8.4-alpha1, =1.0.1, =1.0.3, =0.0.1-alpha, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =5.6.5, =5.6.5, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =6.0.5 and more Source cves: CVE-2022-22971 Source advisory: OSV:GHSA-RQPH-VQWM-22VC...

at.researchstudio.sat:won-core (>=0.4, <=0.9), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +444 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.18.release)

org.springframework:spring-messaging MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - at.researchstudio.sat:won-core =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4,...

at.chrl:chrl-jms (1.1.0), com.ahome-it:ahome-tooling-server-core (>=1.0.110-release, <=1.0.120-release) +71 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.1.release)

org.springframework:spring-messaging MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - at.chrl:chrl-jms 1.1.0 - com.ahome-it:ahome-tooling-server-core =1.0.110-releas...

com.github.zed-platform:zed-service-messagestore-attachment (0.0.20), com.northstrat:springsecurity3-websockets (0.1) +53 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.5.release)

org.springframework:spring-messaging MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.github.zed-platform:zed-service-messagestore-attachment 0.0.20 -...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +111 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.3.release)

org.springframework:spring-messaging MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 -...

ca.jeb:common-java (2014.10.01), ca.jeb:protobuf-serializer (2014.10.01) +69 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.7.release)

org.springframework:spring-messaging MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.jeb:common-java 2014.10.01 - ca.jeb:protobuf-serializer 2014.10.01 -...

org.projectreactor.spring:reactor-spring-messaging (>=1.1.0.release, <=1.1.3.release), org.springframework.integration:spring-integration-amqp (4.0.0.release) +26 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.3.release)

org.springframework:spring-messaging MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.projectreactor.spring:reactor-spring-messaging =1.1.0.release, =1.1.3.relea...

com.dell.cpsd.common.client:common-client (1.3.0), com.dell.cpsd.common.messaging:common-contract-enricher (1.5.0) +42 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.8.release)

org.springframework:spring-messaging MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.dell.cpsd.common.client:common-client 1.3.0 -...

ai.superstream:spring-kafka (>=2.8.4-alpha1, <=2.8.4-alpha6), biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.5) +2369 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=5.3.0, <=5.3.19)

org.springframework:spring-messaging MAVEN version =5.3.0, =2.8.4-alpha1, =1.0.1, =1.0.3, =0.0.1-alpha, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =5.6.5, =5.6.5, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =6.0.5 and more Source cves: CVE-2022-22971 Source advisory: MEND:CVE-2022-22971...

spring-messaging module Code Execution

The vulnerability of the spring-messaging module in the Spring Framework is caused by errors in the handling of STOMP messages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted message...

spring-framework: ReDoS Attack with spring-messaging

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.1.0, <=3.4.0) +121 more potentially affected by CVE-2018-1270 via org.springframework:spring-messaging (>=5.0.0.release, <=5.0.4.release)

org.springframework:spring-messaging MAVEN version =5.0.0.release, =3.1.0, =0.2.0, =0.1.0-rc1, =3.0.0-alpha.1, =3.0.1 and more Source cves: CVE-2018-1270 Source advisory: OSV:GHSA-P5HG-3XM3-GCJG...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.1.0, <=3.4.0) +121 more potentially affected by CVE-2018-1270 via org.springframework:spring-messaging (>=5.0.0.release, <=5.0.4.release)

org.springframework:spring-messaging MAVEN version =5.0.0.release, =3.1.0, =0.2.0, =0.1.0-rc1, =3.0.0-alpha.1, =3.0.1 and more Source cves: CVE-2018-1270 Source advisory: GHSA-P5HG-3XM3-GCJG...

Denial of Service in org.springframework:spring-core

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...

spring-messaging module Spring Framework Full Control

The vulnerability of the spring-messaging module in the Spring Framework is caused by errors in the handling of STOMP messages. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full control over the application through a specially crafted message...

CVE-2018-1257

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...

CVE-2018-1257: Undefined Security Weakness

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...