VMware Spring Cloud Function 3.1.4

CPE Details

VMware Spring Cloud Function 3.1.4
vmware
spring_cloud_function
3.1.4
2022-04-04
13h34 +00:00
2022-04-05
13h38 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:vmware:spring_cloud_function:3.1.4:*:*:*:*:*:*:*

Informations

Vendor

vmware

Product

spring_cloud_function

Version

3.1.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-22979 2022-06-21 12h23 +00:00 In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.
7.5
High
CVE-2022-22963 2022-04-01 00h00 +00:00 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
9.8
Critical