Lucene search
Brian ClozelSPRING:8742ADFAF232CA701C5B60203FC92373HistoryNov 27, 2023 - 12:00 a.m.
CVE-2023-34053, CVE-2023-34055: Spring Framework and Spring Boot vulnerabilities
2023-11-2700:00:00
Brian Clozel
spring.io
175
spring framework
spring boot
update asap
cve-2023-34053
cve-2023-34055
Updates
- [11-27] Blog posts updated to refer to the CVE reports published
The Spring Framework 6.0.14 release shipped on November 16th includes a fix for CVE-2023-34053.
The Spring Boot 2.7.18 release shipped on November 23th includes fixes for CVE-2023-34055.
Users are encouraged to update as soon as possible.
Related
openvas
openvas
VMware Spring Boot 2.7.0 - 2.7.17, 3.0.0 - 3.0.12, 3.1.0 - 3.1.5 DoS Vulnerability
2023-11-30 00:00:00
VMware Spring Framework 6.0.0 - 6.0.13 DoS Vulnerability
2023-11-30 00:00:00
spring
spring
This Week in Spring - 28 November, 2023
2023-11-28 00:00:00
cvelist
cvelist
CVE-2023-34053 Spring Framework server Web Observations DoS Vulnerability
2023-11-28 08:10:37
CVE-2023-34055 Spring Boot server Web Observations DoS Vulnerability
2023-11-28 08:27:25
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Boot arbitrary denial of service vulnerability ( CVE-2023-34053)
2024-06-20 18:41:52
osv
osv
Spring Framework vulnerable to denial of service
2023-11-28 09:30:27
Spring Boot Actuator denial of service vulnerability
2023-11-28 09:30:27
CVE-2023-34055
2023-11-28 09:15:07
nvd
nvd
CVE-2023-34053
2023-11-28 09:15:06
CVE-2023-34055
2023-11-28 09:15:07
debiancve
debiancve
CVE-2023-34053
2023-11-28 09:15:06
ubuntucve
ubuntucve
CVE-2023-34053
2023-11-28 00:00:00
cve
cve
CVE-2023-34053
2023-11-28 09:15:06
CVE-2023-34055
2023-11-28 09:15:07
prion
prion
Design/Logic Flaw
2023-11-28 09:15:00
Design/Logic Flaw
2023-11-28 09:15:00
redhatcve
redhatcve
CVE-2023-34053
2023-11-28 13:28:10
CVE-2023-34055
2023-11-28 13:28:20
github
github
Spring Framework vulnerable to denial of service
2023-11-28 09:30:27
Spring Boot Actuator denial of service vulnerability
2023-11-28 09:30:27
veracode
veracode
Denial Of Service (DoS)
2023-11-29 07:43:10
Denial Of Service (DoS)
2023-11-29 07:59:37
redhat
redhat
(RHSA-2024:3354) Important: Red Hat Fuse 7.13.0 release and security update
2024-05-23 22:44:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
16.2%
Related for SPRING:8742ADFAF232CA701C5B60203FC92373