Lucene search
PRIOn knowledge basePRION:CVE-2023-20863HistoryApr 13, 2023 - 8:15 p.m.
Race condition
2023-04-1320:15:00
PRIOn knowledge base
www.prio-n.com
15
spring
framework
race condition
denial-of-service
vulnerability
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring_framework | ge | 6.0.0 | |
| spring_framework | lt | 6.0.8 | |
| spring_framework | ge | 5.3.0 | |
| spring_framework | lt | 5.3.27 | |
| spring_framework | ge | 5.2.0 | |
| spring_framework | lt | 5.2.24 |
References
Related
ubuntucve
ubuntucve
CVE-2023-20863
2023-04-13 00:00:00
nvd
nvd
CVE-2023-20863
2023-04-13 20:15:07
broadcom
broadcom
Spring Expression DoS Vulnerability (CVE-2023-20863)
2024-04-16 00:00:00
openvas
openvas
veracode
veracode
Denial Of Service (DoS)
2023-04-18 07:02:49
cve
cve
CVE-2023-20863
2023-04-13 20:15:07
ibm
ibm
osv
osv
CVE-2023-20863
2023-04-13 20:15:07
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
github
github
Spring Framework vulnerable to denial of service
2023-04-13 21:30:27
redhatcve
redhatcve
CVE-2023-20863
2023-04-18 15:31:05
debiancve
debiancve
CVE-2023-20863
2023-04-13 20:15:07
cvelist
cvelist
CVE-2023-20863
2023-04-13 00:00:00
redhat
redhat
nessus
nessus
Oracle Primavera Gateway (Jul 2023 CPU)
2023-07-19 00:00:00
Oracle MySQL Enterprise Monitor (October 2023 CPU)
2023-10-19 00:00:00
Oracle WebLogic Server (July 2023 CPU)
2023-07-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00