CVE-2021-22060
Description
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.
CWE
- (none)
Affected
- n/a / Spring Framework — v=Spring Framework 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions [affected]
CVSS
- (none)
References
- https://tanzu.vmware.com/security/cve-2021-22060 x_refsource_MISC
- https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
Source
cvelistV5-main/cves/2021/22xxx/CVE-2021-22060.json