VDB
CVE-2023-29986
CVE-2023-29986
PUBLISHED
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
EPSS 0.75% · 54.6th percentile
Risk Scores
EPSS Score
0.75%
54.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Spring Framework | Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions |
Timeline
- Apr 7, 2022 PoC Published
- May 11, 2023 CVE Published
- May 11, 2023 EPSS Score
- Jun 18, 2023 EPSS Score
- Jul 25, 2023 EPSS Score
- Sep 1, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Oct 21, 2023 PoC Published
- Nov 15, 2023 EPSS Score
- Dec 23, 2023 EPSS Score
- Jan 30, 2024 EPSS Score
- Mar 8, 2024 EPSS Score