CX: CVE-2021-22060 in Maven-org.springframework:spring-core and 5.3.13 @ hello-world-java.master #6
Description
Description
In Spring Framework versions 5.2.x before 5.2.19.RELEASE, 5.3.x before 5.3.14 and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.
MEDIUM Vulnerable Package issue exists @ org.springframework:spring-core in branch master
Vulnerability ID: CVE-2021-22060
Package Name: org.springframework:spring-core
Severity: MEDIUM
CVSS Score: 4.3
Publish Date: 2022-01-10T14:10:00
Current Package Version: 5.3.13
Remediation Upgrade Recommendation: 5.3.14