diff --git a/advisories/github-reviewed/2022/04/GHSA-558x-2xjg-6232/GHSA-558x-2xjg-6232.json b/advisories/github-reviewed/2022/04/GHSA-558x-2xjg-6232/GHSA-558x-2xjg-6232.json index cdf3926ff63..5e0fef08cb7 100644 --- a/advisories/github-reviewed/2022/04/GHSA-558x-2xjg-6232/GHSA-558x-2xjg-6232.json +++ b/advisories/github-reviewed/2022/04/GHSA-558x-2xjg-6232/GHSA-558x-2xjg-6232.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-558x-2xjg-6232", - "modified": "2022-04-12T15:23:52Z", + "modified": "2023-03-28T22:26:10Z", "published": "2022-04-03T00:01:00Z", "aliases": [ "CVE-2022-22950" ], "summary": "Allocation of Resources Without Limits or Throttling in Spring Framework", - "details": "In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0 - 5.2.19, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.", + "details": "In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.", "severity": [ { "type": "CVSS_V3", @@ -28,7 +28,7 @@ "introduced": "5.3.0" }, { - "fixed": "5.3.16" + "fixed": "5.3.17" } ] } @@ -47,7 +47,7 @@ "introduced": "0" }, { - "fixed": "5.2.20" + "fixed": "5.2.20.RELEASE" } ] } @@ -71,6 +71,18 @@ "type": "WEB", "url": "https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11" }, + { + "type": "PACKAGE", + "url": "https://github.com/spring-projects/spring-framework" + }, + { + "type": "WEB", + "url": "https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE" + }, + { + "type": "WEB", + "url": "https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17" + }, { "type": "WEB", "url": "https://tanzu.vmware.com/security/cve-2022-22950"