CVE-2021-22060

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.13 Spring Framework versions 5.2.0 through 5.2.18 Spring Framework older unsupported versions

Description The issue allows a user to provide malicious input, causing the insertion of additional log entries. This is related to protecting against additional types of input and in more places of the Spring Framework codebase.

Recommendations For Spring Framework versions 5.3.0 through 5.3.13, update to a version that includes the necessary security patches. For Spring Framework versions 5.2.0 through 5.2.18, update to a version that includes the necessary security patches. For Spring Framework older unsupported versions, consider upgrading to a supported version that includes the necessary security patches.