Lucene search
GitHub Advisory DatabaseGHSA-6GF2-PVQW-37PHHistoryJan 12, 2022 - 11:04 p.m.
Log entry injection in Spring Framework
2022-01-1223:04:06
GitHub Advisory Database
github.com
28
0.001 Low
EPSS
Percentile
22.4%
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.springframework:spring-core | lt | 5.2.19 | |
| org.springframework:spring-core | lt | 5.3.14 |
Related
ubuntucve
ubuntucve
CVE-2021-22060
2022-01-10 00:00:00
CVE-2021-22096
2021-10-28 00:00:00
osv
osv
CVE-2021-22060
2022-01-10 14:10:16
Log entry injection in Spring Framework
2022-01-12 23:04:06
Improper Output Neutralization for Logs in Spring Framework
2022-05-24 19:19:04
cvelist
cvelist
CVE-2021-22060
2022-01-07 22:39:55
CVE-2021-22096
2021-10-28 15:22:35
redhatcve
redhatcve
CVE-2021-22060
2022-02-17 04:30:23
CVE-2021-22096
2021-12-21 12:20:57
prion
prion
Design/Logic Flaw
2022-01-10 14:10:00
Input validation
2021-10-28 16:15:00
cve
cve
CVE-2021-22060
2022-01-10 14:10:00
CVE-2021-22096
2021-10-28 16:15:00
debiancve
debiancve
CVE-2021-22060
2022-01-10 14:10:00
CVE-2021-22096
2021-10-28 16:15:00
ibm
ibm
Security Bulletin: Vulnerability in [All] Spring Framework - CVE-2021-22060 (Publicly disclosed vulnerability) impacts IBM Watson Machine Learning Accelerator
2022-03-23 02:33:36
veracode
veracode
Log Injection
2021-10-29 13:23:08
cnvd
cnvd
Vmware Spring Framework has an unspecified vulnerability
2022-01-10 00:00:00
github
github
Improper Output Neutralization for Logs in Spring Framework
2022-05-24 19:19:04
redhat
redhat
nessus
nessus
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.2] (RHSA-2022:6393)
2022-09-08 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.1] (RHSA-2022:5555)
2022-07-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00