CVE-2022-22970
CVE-2022-22970
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.9%KEV nãoPoC —Patch —
Lifecycle
12 May 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
Affected products
n/a · Spring FrameworkWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →