Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-22740

Опубликовано: 29 апр. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.

Older, unsupported versions are also affected.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
Версия до 5.3.48 (исключая)
cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
Версия от 6.1.0 (включая) до 6.1.27 (исключая)
cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
Версия от 6.2.0 (включая) до 6.2.18 (исключая)
cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.7 (исключая)

EPSS

Процентиль: 27%
0.00344
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.

CVSS3: 6.5
redhat
3 месяца назад

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.

CVSS3: 6.5
debian
3 месяца назад

A WebFlux server application that processes multipart requests creates ...

CVSS3: 6.5
github
3 месяца назад

Spring Framework DoS with Multipart Temp Files in WebFlux

EPSS

Процентиль: 27%
0.00344
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400