Lucene search
Redhat.comRH:CVE-2021-22060HistoryFeb 17, 2022 - 4:30 a.m.
CVE-2021-22060
2022-02-1704:30:23
redhat.com
access.redhat.com
37
0.001 Low
EPSS
Percentile
33.9%
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.
Related
ubuntucve
ubuntucve
CVE-2021-22060
2022-01-10 00:00:00
CVE-2021-22096
2021-10-28 00:00:00
osv
osv
CVE-2021-22060
2022-01-10 14:10:16
Log entry injection in Spring Framework
2022-01-12 23:04:06
Improper Output Neutralization for Logs in Spring Framework
2022-05-24 19:19:04
cvelist
cvelist
CVE-2021-22060
2022-01-07 22:39:55
CVE-2021-22096
2021-10-28 15:22:35
github
github
Log entry injection in Spring Framework
2022-01-12 23:04:06
Improper Output Neutralization for Logs in Spring Framework
2022-05-24 19:19:04
prion
prion
Design/Logic Flaw
2022-01-10 14:10:00
Input validation
2021-10-28 16:15:00
debiancve
debiancve
CVE-2021-22060
2022-01-10 14:10:00
CVE-2021-22096
2021-10-28 16:15:00
ibm
ibm
Security Bulletin: Vulnerability in [All] Spring Framework - CVE-2021-22060 (Publicly disclosed vulnerability) impacts IBM Watson Machine Learning Accelerator
2022-03-23 02:33:36
redhatcve
redhatcve
CVE-2021-22096
2021-12-21 12:20:57
veracode
veracode
Log Injection
2021-10-29 13:23:08
cnvd
cnvd
Vmware Spring Framework has an unspecified vulnerability
2022-01-10 00:00:00
cve
cve
CVE-2021-22060
2022-01-10 14:10:16
CVE-2021-22096
2021-10-28 16:15:07
redhat
redhat
nessus
nessus
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.2] (RHSA-2022:6393)
2022-09-08 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.1] (RHSA-2022:5555)
2022-07-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00