{"uuid": "0ca6319d-73ff-4435-9a53-9666d7d71e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22233\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.\n\nSpecifically, an application is vulnerable when all of the following are true:\n\n  *  the application uses Spring MVC\n  *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath\n\n\nTypically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\ud83d\udccf Published: 2024-01-22T15:30:23Z\n\ud83d\udccf Modified: 2025-02-13T19:33:11Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22233\n2. https://security.netapp.com/advisory/ntap-20240614-0005\n3. https://spring.io/security/cve-2024-22233", "creation_timestamp": "2025-02-13T20:13:10.000000Z"}