Description: In Spring Framework versions 5.3.0 – 5.3.10, 5.2.0 – 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.
CVE-2021-22096
Published Date: 2021-10-28T16:15Z
Last Modified: 2022-04-28T14:53Z
CVSS Score: 4.3 (MEDIUM)
EPSS Score: 0.08%
Risk Score: 3.01 (MEDIUM)
Risk Score based on CVSS score and EPSS. This score is for reference purposes and is not internationally recognized.
CVSS:
4.3 |
EPSS:
0.08%
Mitre ATT&CK Technical v15.1
None
Technical Analysis & Mitigation Measures
Reference Links
Vendor - Produce - Version
spring_framework - vmware, spring_framework - vmware, snap_creator_framework - netapp, snapcenter - netapp, active_iq_unified_manager - netapp, active_iq_unified_manager - netapp, management_services_for_element_software_and_netapp_hci - netapp, metrocluster_tiebreaker - netapp, active_iq_unified_manager - netapp, communications_cloud_native_core_console - oracle, communications_cloud_native_core_service_communication_proxy - oracle
Disclaimer
The content on this website is automatically sourced from external websites such as the National Vulnerability Database (NVD), GitHub, and other security-related sources. This content is for reference purposes only, and we are not responsible for the accuracy or integrity of the information linked or displayed from these sources.