Lucene search
F5F5:K000134681HistoryMay 19, 2023 - 12:00 a.m.
K000134681 : Spring Framework vulnerability CVE-2023-20861
2023-05-1900:00:00
my.f5.com
11
spring framework
cve-2023-20861
denial-of-service
Security Advisory Description
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. (CVE-2023-20861)
Impact
This vulnerability allows a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Related
ubuntucve
ubuntucve
CVE-2023-20861
2023-03-23 00:00:00
cve
cve
CVE-2023-20861
2023-03-23 21:15:19
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)
2023-06-28 20:44:09
veracode
veracode
Denial Of Service (DoS)
2023-03-27 22:04:35
osv
osv
CVE-2023-20861
2023-03-23 21:15:19
prion
prion
Race condition
2023-03-23 21:15:00
nvd
nvd
CVE-2023-20861
2023-03-23 21:15:19
github
github
broadcom
broadcom
Spring Expression DoS Vulnerability (CVE-2023-20861)
2024-04-16 00:00:00
cvelist
cvelist
CVE-2023-20861
2023-03-23 00:00:00
nessus
nessus
RHEL 8 : Red Hat Virtualization (RHSA-2023:3771)
2023-06-22 00:00:00
Oracle Identity Manager (Jul 2023 CPU)
2023-07-21 00:00:00
debiancve
debiancve
CVE-2023-20861
2023-03-23 21:15:19
openvas
openvas
spring
spring
This Week in Spring - March 21st, 2023
2023-03-21 00:00:00
redhatcve
redhatcve
CVE-2023-20861
2023-03-24 13:07:29
CVE-2023-20860
2023-03-24 13:07:33
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00