PT-2021-14849
CVE-2021-22096
·
Published
2021-10-28
·
Updated
2022-05-24
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Spring Framework versions 5.3.0 through 5.3.10
Spring Framework versions 5.2.0 through 5.2.17
Spring Framework older unsupported versions
Description
The issue allows a user to provide malicious input, causing the insertion of additional log entries.
Recommendations
For Spring Framework versions 5.3.0 through 5.3.10, update to a version outside of this range to resolve the issue.
For Spring Framework versions 5.2.0 through 5.2.17, update to a version outside of this range to resolve the issue.
For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾