description: n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
problem types: CWE-770: Allocation of Resources Without Limits or Throttling
affected:
{
product: Spring Framework
vendor: n/a
versions:
status: affected, version: Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions
}