Descrição
Spring Data-s internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11; 4.0.0 through 4.0.5.
CVSS 7.5EPSS 0.363%Risco 0.77
Ver fonte- Publicação
- 2026-06-10 00:16:51
- Versões afetadas
- >=2.7.0,<2.7.20, >=3.3.0,<3.3.17, >=3.4.0,<3.4.15, >=3.5.0,<3.5.12, >=4.0.0,<4.0.6
- Tipo
- Biblioteca
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H