CVE-2021-22096CWE-117

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the…

published October 28, 2021

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01352 · 71.3th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2021-10-28T15:22Z
EPSS history
Timeline
  • 28 OCT 15:22Z
    In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the…
    cvelistv5