PT-2021-14849
CVE-2021-22096
·
تاريخ النشر
2021-10-28
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Spring Framework versions 5.3.0 through 5.3.10
Spring Framework versions 5.2.0 through 5.2.17
Spring Framework older unsupported versions
Description
The issue allows a user to provide malicious input, causing the insertion of additional log entries.
Recommendations
For Spring Framework versions 5.3.0 through 5.3.10, update to a version outside of this range to resolve the issue.
For Spring Framework versions 5.2.0 through 5.2.17, update to a version outside of this range to resolve the issue.
For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾