ID de Prueba:	1.3.6.1.4.1.25623.1.0.114750
Categoría:	Denial of Service
Título:	VMware Spring Framework < 5.3.39 Spring Expression DoS Vulnerability - Linux
Resumen:	The VMware Spring Framework is prone to a denial of service; (DoS) vulnerability.
Descripción:	Summary: The VMware Spring Framework is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: It is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a DoS condition. Affected Software/OS: VMware Spring Framework versions prior to 5.3.39. Specifically, an application is vulnerable when the following is true: - The application evaluates user-supplied SpEL expressions. Solution: Update to version 5.3.39 or later. Vendor note: Evaluation of user-supplied SpEL expressions should be avoided when possible. Otherwise, user-supplied SpEL expressions should be evaluated with a SimpleEvaluationContext in read-only mode. No other steps are necessary. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-38808
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.