Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-20863

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wxqc-pxw9-g2p8

Spring Framework vulnerable to denial of service In Spring Framework versions prior to 5.2.24.release+ , 5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial-of-service (DoS) condition.

gitlab/maven/org.springframework/spring-core/CVE-2023-20863

Spring Framework vulnerable to denial of service In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

gitlab/maven/org.springframework/spring-expression/CVE-2023-20863

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.