Lucene search

K
springBrian ClozelSPRING:47D389E3FD0D4F8B2B231C97E86D6D0C
HistoryJan 22, 2024 - 12:00 a.m.

CVE-2024-22233: Spring Framework server Web DoS Vulnerability

2024-01-2200:00:00
Brian Clozel
spring.io
25
spring framework
web dos
vulnerability fix
update prompt
cve-2024-22233
spring boot 3.1.8
spring boot 3.2.2

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

16.2%

The Spring Framework 6.0.16 and 6.1.3 releases shipped on January 11th includes a fix for CVE-2024-22233.

The Spring Boot 3.1.8 and 3.2.2 releases shipped last week upgrade to the relevant Spring Framework versions.

Users are encouraged to update as soon as possible.

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

16.2%