VMware Spring Cloud Function 3.1.0 Milestone 2

CPE Details

VMware Spring Cloud Function 3.1.0 Milestone 2
3.1.0
2022-04-04
13h34 +00:00
2022-04-05
13h38 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:vmware:spring_cloud_function:3.1.0:m2:*:*:*:*:*:*

Informations

Vendor

vmware

Product

spring_cloud_function

Version

3.1.0

Update

m2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-22979 2022-06-21 12h23 +00:00 In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.
7.5
Haute
CVE-2022-22963 2022-04-01 00h00 +00:00 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
9.8
Critique