In spring framework versions prior... CVE-2022-22970
3.5
AV
AC
AU
C
I
A
发布：
2022-05-12
修订：
2022-10-07
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有9条受影响产品信息
