Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-22970
HistoryMay 12, 2022 - 8:15 p.m.

CVE-2022-22970

2022-05-1220:15:00
Alpine Linux Development Team
security.alpinelinux.org
29

0.004 Low

EPSS

Percentile

75.0%

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.