Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.

Improper Restriction of XML External Entity Reference in Spring Framework

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Cross-Site Request Forgery in Spring Framework

Missing XML Validation in Spring Framework

Cross-Site Request Forgery in Spring Framework

Allocation of Resources Without Limits or Throttling in Spring Framework

Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupp ...

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.