CVE-2021-22095
CVE-2021-22095
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
30 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message
Affected products
n/a · Spring AMQPWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →