CVE-2022-22950

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@vmware.com

Published

2022-04-01

Last modified

2026-10-08

Weaknesses

CWE-770

Affected products

• Spring Framework (Vmware)

References

• https://tanzu.vmware.com/security/cve-2022-22950