VDB
CVE-2023-47715
CVE-2023-47715
PUBLISHED
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
EPSS 0.33% · 26.0th percentile
Risk Scores
EPSS Score
0.33%
26.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Spring Framework | * |
Timeline
- Apr 7, 2022 PoC Published
- Oct 21, 2023 PoC Published
- Mar 21, 2024 CVE Published
- Mar 22, 2024 EPSS Score
- Apr 17, 2024 EPSS Score
- May 13, 2024 EPSS Score
- Jun 8, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
- Jul 30, 2024 EPSS Score
- Aug 2, 2024 CVE Updated
- Aug 25, 2024 EPSS Score
- Sep 20, 2024 EPSS Score