{"vulnerability": "CVE-2024-22233", "sightings": [{"uuid": "0ca6319d-73ff-4435-9a53-9666d7d71e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22233\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.\n\nSpecifically, an application is vulnerable when all of the following are true:\n\n  *  the application uses Spring MVC\n  *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath\n\n\nTypically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\ud83d\udccf Published: 2024-01-22T15:30:23Z\n\ud83d\udccf Modified: 2025-02-13T19:33:11Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22233\n2. https://security.netapp.com/advisory/ntap-20240614-0005\n3. https://spring.io/security/cve-2024-22233", "creation_timestamp": "2025-02-13T20:13:10.000000Z"}, {"uuid": "a195c22a-43db-4c91-8f68-63294f8dc9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/arpsyndicate/3055", "content": "#ExploitObserverAlert\n\nCVE-2024-22233\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2024-22233. In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.  Specifically, an application is vulnerable when all of the following are true:    *  the application uses Spring MVC   *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath   Typically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-26T20:14:50.000000Z"}, {"uuid": "643a3a24-69b8-4978-b4ae-a7e88a1b4398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/arpsyndicate/3191", "content": "#ExploitObserverAlert\n\nCVE-2024-22233\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2024-22233. In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.  Specifically, an application is vulnerable when all of the following are true:    *  the application uses Spring MVC   *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath   Typically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-28T03:50:07.000000Z"}, {"uuid": "1388d1ce-12c9-446f-860b-c148664a1d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/186199", "content": "https://ift.tt/3zVDk28\nCVE-2024-22233 | VMware Spring Framework 6.0.15/6.1.2 HTTP Request denial of service", "creation_timestamp": "2024-02-16T09:11:52.000000Z"}, {"uuid": "a541f72e-37bd-4061-8087-3e6b00cced4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/171471", "content": "https://ift.tt/V1ivojg\nCVE-2024-22233", "creation_timestamp": "2024-01-22T22:16:35.000000Z"}, {"uuid": "81a27e77-e901-450a-adfa-85ec552e283e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/171173", "content": "https://ift.tt/VMTzYd6\nCVE-2024-22233", "creation_timestamp": "2024-01-22T14:21:53.000000Z"}]}