← back
CVE-2022-22971

CVE-2022-22971

EPSS 2.9%CWE-770
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
Affected products
n/a · Spring Framework

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://security.netapp.com/advisory/ntap-20220616-0003/https://tanzu.vmware.com/security/cve-2022-22971https://www.oracle.com/security-alerts/cpujul2022.html