Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
VMware Spring Framework < 5.2.22, 5.3.x < 5.3.20 Multiple DoS Vulnerabilities - Windows
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The VMware Spring Framework is prone to multiple denial of service (DoS) vulnerabilities.
Insight
Insight
The following flaws exist: - CVE-2022-22970: Spring Framework DoS via Data Binding to MultipartFile or Servlet Part Denial of Service (DoS) attack in Spring MVC or Spring WebFlux applications that handle file uploads and rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object. - CVE-2022-22971: Spring Framework DoS with STOMP over WebSocket Denial of service (DoS) attack by authenticated users in Spring applications with a STOMP over WebSocket endpoint.
Affected Software
Affected Software
VMware Spring Framework versions prior to 5.2.22 and 5.3.x prior to 5.3.20.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
Update to version 5.2.22, 5.3.20 or later.