← Database

CVE-2022-22950

MEDIUM CVSS: 6.5 Published: 2022-04-01 Modified: 2026-06-17

Description

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Affected Platforms

Vmware Spring Framework

Weakness Type

CWE-770, CWE-770

References