Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x4h3-g2x4-8gqv

Опубликовано: 01 июн. 2026
Источник: github
Github: Прошло ревью
CVSS3: 5.7

Описание

Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry

OOM error is possible while attempting to add infinite amount of functions to Function Registry.

Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

Пакеты

Наименование

org.springframework.cloud:spring-cloud-function-context

maven
Затронутые версииВерсия исправления

>= 4.3.0, < 4.3.3

4.3.3

Наименование

org.springframework.cloud:spring-cloud-function-context

maven
Затронутые версииВерсия исправления

>= 5.0.0, < 5.0.2

5.0.2

Наименование

org.springframework.cloud:spring-cloud-function-context

maven
Затронутые версииВерсия исправления

>= 3.2.10, <= 3.2.15

Отсутствует

Наименование

org.springframework.cloud:spring-cloud-function-context

maven
Затронутые версииВерсия исправления

>= 4.1.0, <= 4.1.9

Отсутствует

Наименование

org.springframework.cloud:spring-cloud-function-context

maven
Затронутые версииВерсия исправления

>= 4.2.0, <= 4.2.5

Отсутствует

EPSS

Процентиль: 11%
0.00211
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 5.5
redhat
2 месяца назад

OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

CVSS3: 5.7
nvd
2 месяца назад

OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

EPSS

Процентиль: 11%
0.00211
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-770