CVE-2022-22979

2022-06-2114:23:38

vmware

www.cve.org

spring cloud function

denial-of-service

caching issue

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.

CNA Affected

[
  {
    "product": "Spring Cloud Function",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Cloud Function (prior to 3.2.6)"
      }
    ]
  }
]