CVE:CVE-2022-22970
CNNVD:CNNVD-202205-2988
Spring Framework是美国Spring团队的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Spring Framework 存在输入验证错误漏洞，攻击者利用该漏洞可通过将数据绑定到MultipartFile导致Spring Framework致命的错误，从而触发拒绝服务。
solution:Upgrade vmware spring_framework to a higher version than 5.2.21,5.3.19,and avoid the version (,5.2.21],[5.3.0,5.3.19]; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp brocade_san_navigator to a higher version than -; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -