What is GHSA-q588-3544-8g33?

GHSA-q588-3544-8g33 is a security advisory published by GitHub Security Advisories with High severity. Denial of Service in Spring Cloud Function

Which CVE IDs does GHSA-q588-3544-8g33 cover?

GHSA-q588-3544-8g33 covers the following CVE IDs: CVE-2022-22979. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q588-3544-8g33?

GHSA-q588-3544-8g33 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-q588-3544-8g33?

GHSA-q588-3544-8g33 affects 1 product, including: maven/org.springframework.cloud:spring-cloud-function-parent:\u003c 3.2.6.

GHSA-q588-3544-8g33HighCVSS 7.5

Denial of Service in Spring Cloud Function

Vendor

GitHub Security Advisories

Published

June 22, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-22979 →

📋 Description

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.

🎯 Affected products1

maven/org.springframework.cloud:spring-cloud-function-parent:< 3.2.6

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-22979
https://tanzu.vmware.com/security/cve-2022-22979
https://github.com/advisories/GHSA-q588-3544-8g33