Spring Cloud Function vulnerabilities
We track 2 vulnerabilities in Spring Cloud Function products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on June 21, 2022.
2vulnerabilities
1critical
1high
1exploited
8.7average CVSS score
Latest Spring Cloud Function vulnerabilities
- 7.5 High severity
Spring Cloud Function: Allocation of Resources Without Limits or Throttling
In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.
- 9.8 Critical severity
VMware Tanzu Spring Cloud Function Remote Code Execution Exploited
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local r