Description (CNA)
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Spring Framework | affected Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions |
CWE
CWE-770
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.