Lucene search
Ubuntu.comUB:CVE-2023-20863HistoryApr 13, 2023 - 12:00 a.m.
CVE-2023-20863
2023-04-1300:00:00
ubuntu.com
ubuntu.com
88
spring framework
dos
denial of service
vulnerability
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.9%
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ ,
it is possible for a user to provide a specially crafted SpEL expression
that may cause a denial-of-service (DoS) condition.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | libspring-java | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libspring-java | < any | UNKNOWN |
Related
broadcom
broadcom
Spring Expression DoS Vulnerability (CVE-2023-20863)
2024-04-16 00:00:00
nvd
nvd
CVE-2023-20863
2023-04-13 20:15:07
cve
cve
CVE-2023-20863
2023-04-13 20:15:07
github
github
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
veracode
veracode
Denial Of Service (DoS)
2023-04-18 07:02:49
ibm
ibm
osv
osv
CVE-2023-20863
2023-04-13 20:15:07
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
openvas
openvas
redhatcve
redhatcve
CVE-2023-20863
2023-04-18 15:31:05
debiancve
debiancve
CVE-2023-20863
2023-04-13 20:15:07
prion
prion
Race condition
2023-04-13 20:15:00
cvelist
cvelist
CVE-2023-20863
2023-04-13 00:00:00
redhat
redhat
nessus
nessus
Oracle Primavera Gateway (Jul 2023 CPU)
2023-07-19 00:00:00
Oracle MySQL Enterprise Monitor (October 2023 CPU)
2023-10-19 00:00:00
Oracle WebLogic Server (July 2023 CPU)
2023-07-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.9%
Related for UB:CVE-2023-20863