Description
Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14.
CVSS 7.5EPSS 0.363%Risk 0.77
View source- Published
- 2026-06-10 00:16:50
- Affected versions
- >=3.4.0,<3.4.15, >=3.5.0,<3.5.12, >=4.0.0,<4.0.6
- Type
- Library
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H