GHSA-w3c8-7r8f-9jp8MediumCVSS 5.3
Spring MVC controller vulnerable to a DoS attack
🔗 CVE IDs covered (1)
📋 Description
Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.
🎯 Affected products1
- maven/org.springframework:spring-webmvc:>= 5.3.0, < 5.3.42