Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ypb4-mywt-bfac
Vulnerability ID VCID-ypb4-mywt-bfac
Aliases CVE-2022-22968
GHSA-g5mm-vmx4-3rg7
Summary Improper Handling of Case Sensitivity In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-178 Improper Handling of Case Sensitivity
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.20519 https://api.first.org/data/v1/epss?cve=CVE-2022-22968
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-g5mm-vmx4-3rg7
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-22968
https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea
https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7
https://security.netapp.com/advisory/ntap-20220602-0004
https://security.netapp.com/advisory/ntap-20220602-0004/
https://www.oracle.com/security-alerts/cpujul2022.html
CVE-2022-22968 https://nvd.nist.gov/vuln/detail/CVE-2022-22968
CVE-2022-22968 https://tanzu.vmware.com/security/cve-2022-22968
GHSA-g5mm-vmx4-3rg7 https://github.com/advisories/GHSA-g5mm-vmx4-3rg7
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95662
EPSS Score 0.20519
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T20:57:39.119496+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-context/CVE-2022-22968.yml 38.6.0