Lucene search
PRIOn knowledge basePRION:CVE-2023-20861HistoryMar 23, 2023 - 9:15 p.m.
Race condition
2023-03-2321:15:00
PRIOn knowledge base
www.prio-n.com
6
race condition
denial-of-service
nvd
spring framework
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring_framework | ge | 6.0.0 | |
| spring_framework | le | 6.0.6 | |
| spring_framework | ge | 5.3.0 | |
| spring_framework | le | 5.3.25 | |
| spring_framework | le | 5.2.22 |
Related
ubuntucve
ubuntucve
CVE-2023-20861
2023-03-23 00:00:00
cve
cve
CVE-2023-20861
2023-03-23 21:15:19
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)
2023-06-28 20:44:09
veracode
veracode
Denial Of Service (DoS)
2023-03-27 22:04:35
osv
osv
CVE-2023-20861
2023-03-23 21:15:19
nvd
nvd
CVE-2023-20861
2023-03-23 21:15:19
github
github
broadcom
broadcom
Spring Expression DoS Vulnerability (CVE-2023-20861)
2024-04-16 00:00:00
f5
f5
K000134681 : Spring Framework vulnerability CVE-2023-20861
2023-05-19 00:00:00
cvelist
cvelist
CVE-2023-20861
2023-03-23 00:00:00
nessus
nessus
RHEL 8 : Red Hat Virtualization (RHSA-2023:3771)
2023-06-22 00:00:00
Oracle Identity Manager (Jul 2023 CPU)
2023-07-21 00:00:00
debiancve
debiancve
CVE-2023-20861
2023-03-23 21:15:19
openvas
openvas
spring
spring
This Week in Spring - March 21st, 2023
2023-03-21 00:00:00
redhatcve
redhatcve
CVE-2023-20861
2023-03-24 13:07:29
CVE-2023-20860
2023-03-24 13:07:33
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00