CVE-2022-22950CWE-770

CVE-2022-22950: vulnerability in Spring Framework

Published · Updated

Follow this CVE+ Monitor Spring Framework+ Monitor libspring-java

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 37%
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
Affected products
n/a · Spring Framework