Package · Alpine

jenkins

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2022-22971 Public exploit

Allocation of Resources Without Limits or Throttling in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

libspring-java libspring-java jenkins org.springframework:spring-messaging Debian Ubuntu Alpine Maven

May 12, 2022
High 7.5

CVE-2022-22970 Public exploit

Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

libspring-java libspring-java jenkins org.springframework:spring-beans Debian Ubuntu Alpine Maven

May 12, 2022