← back
CVE-2022-22970

CVE-2022-22970

EPSS 1.9%CWE-770
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
Affected products
n/a · Spring Framework

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →