CVE-2024-22233

Summary

CVE-2024-22233 is a newly disclosed vulnerability in Spring Framework versions 6.0.15 and 6.1.2. This issue allows a user to send specially crafted HTTP requests that trigger a denial-of-service (DoS) condition. The vulnerability arises when an application uses Spring MVC and has Spring Security 6.1.6 or 6.2.1 on its classpath. Commonly, Spring Boot applications depend on org.springframework.boot:spring-boot-starter-web and org.springframework.boot:spring-boot-starter-security to fulfill these prerequisites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.