Vendor

Spring by VMware Tanzu

3 known vulnerabilities.

Products

Spring Security 1 Spring Cloud Skipper 1 Spring Cloud Function Framework 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.2

CVE-2024-22271

Spring Cloud Function Web DOS Vulnerability

In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the f…

Spring by VMware Tanzu Spring Cloud Function Framework org.springframework.cloud:spring-cloud-function-context Maven

Jul 9, 2024
High 8.8

CVE-2024-22263 Public exploit EPSS 18%

Arbitrary File Write Vulnerability in Spring Cloud Data Flow

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user…

Spring by VMware Tanzu Spring Cloud Skipper

Jun 19, 2024