Vulnetix
Try Vulnetix Request Demo
CVE-2021-22060 PUBLISHED

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.

EPSS 0.16% · 37.2th percentile

Risk Scores

EPSS Score
0.16%
37.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:24.04:LTSlibspring-java0, 4.3.30-2ubuntu0.24.04.1~esm1, 4.3.30-2
Ubuntu:Pro:16.04:LTSlibspring-java3.2.13-5, 0, 3.2.13-4
Ubuntu:Pro:22.04:LTSlibspring-java4.3.30-1, 0, 4.3.30-1ubuntu0.1~esm1
Ubuntu:25.10libspring-java4.3.30-2ubuntu1, 0, 4.3.30-3ubuntu1
Ubuntu:Pro:20.04:LTSlibspring-java0, 4.3.22-4ubuntu0.1~esm1, 4.3.22-4
Ubuntu:Pro:18.04:LTSlibspring-java4.3.12-1, 0, 4.3.11-1
Ubuntu:Pro:14.04:LTSlibspring-java0, 3.0.6.RELEASE-13ubuntu0.1~esm2, 3.0.6.RELEASE-13ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →