PT-2021-14849

CVE-2021-22096

·

Published

2021-10-28

·

Updated

2022-05-24

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.10 Spring Framework versions 5.2.0 through 5.2.17 Spring Framework older unsupported versions
Description The issue allows a user to provide malicious input, causing the insertion of additional log entries.
Recommendations For Spring Framework versions 5.3.0 through 5.3.10, update to a version outside of this range to resolve the issue. For Spring Framework versions 5.2.0 through 5.2.17, update to a version outside of this range to resolve the issue. For Spring Framework older unsupported versions, consider upgrading to a supported version to mitigate the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-RFMP-97JJ-H8M6
RHSA-2022:5555
RHSA-2022:6393
Found an issue in the description? Have something to add? Feel free to write us 👾