description: In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.
problem types: CWE-117: Improper Output Neutralization for Logs
affected:
{
product: Spring Framework
vendor: n/a
versions:
status: affected, version: Spring Framework versions 5.3.x prior to 5.3.12+, 5.2.x prior to  5.2.18+ and all older unsupported versions are impacted.
}