CVE-2022-22970

CVE-2022-22970

Vendor N/A
Product Spring Framework
Weakness CWE-770 · Uncontrolled resource consumption
Published May 12, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

Key dates

02Disclosure timeline

May 12, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE