CVE-2023-20863 — n/a / Spring Framework

Description (CNA)

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

Affected (CNA)

Vendor / product	Versions
n/a / Spring Framework	affected Spring framework versions 5.2.x.release prior to 5.2.24.release+, 5.3.x prior to 5.3.27+, 6.0.x prior to 6.0.8+ and older unsupported versions

CWE

CWE-400

References

https://spring.io/security/cve-2023-20863
https://security.netapp.com/advisory/ntap-20240524-0015/

ADP enrichment

CVE

No English description supplied.

https://spring.io/security/cve-2023-20863
https://security.netapp.com/advisory/ntap-20240524-0015/

CISA-ADP

No English description supplied.

No references supplied.