CVE-2022-22970

Fixed upstream EPSS 2%

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

Published 2022-05-12 · CVE record · OSV

Products: vmware spring_framework, oracle financial_services_crime_and_compliance_management_studio, netapp active_iq_unified_manager, netapp brocade_san_navigator, netapp cloud_secure_agent, netapp oncommand_insight

Fixed upstream

Distro releases