CVE:CVE-2022-22971
CNNVD:CNNVD-202205-2980
Spring Framework是美国Spring团队的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Spring Framework存在输入验证错误漏洞。攻击者利用该漏洞通过 WebSocket 上的 STOMP 导致 Spring Framework 的致命错误，以触发拒绝服务。
solution:Upgrade vmware spring_framework to a higher version than 5.2.21,5.3.19,and avoid the version [5.2.0,5.2.21],[5.3.0,5.3.19]; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -