{"id":"CVE-2022-22950","published":"2022-04-01T22:17:32Z","modified":"2026-10-08T21:03:30Z","title":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a…","vendor":null,"product":null,"tier":"tail","description":{"text":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.36909,"percentile":0.98509,"provenance":"source"},"cwes":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling"}],"references":[{"url":"https://tanzu.vmware.com/security/cve-2022-22950","tags":["x_refsource_MISC"]}],"priority":{"score":19.7,"factors":[{"name":"EPSS percentile","points":19.7}]},"affectedVersions":[{"vendor":"n/a","product":"Spring Framework","versions":["Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions"]}],"affected":[{"ecosystem":"Maven","package":"org.springframework:spring-expression","vulnerableRanges":[">=5.3.0, <5.3.17","<5.2.20.RELEASE"],"patched":["5.3.17","5.2.20.RELEASE"],"from":["GHSA-558x-2xjg-6232"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1628","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-spring-framework-cve-2022-22950","children":[{"from":"CVE-2022-22950","to":"CVE-2023-20863","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["spring-expression/src/main/java/org/springframework/expression/spel/SpelMessage.java"],"commits":["https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11","https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15","https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e"],"basis":"rarely changed file"}]},{"from":"CVE-2022-22950","to":"CVE-2024-38808","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["spring-expression/src/main/java/org/springframework/expression/spel/ast/ConstructorReference.java"],"commits":["https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11","https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658","https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c"],"basis":"shared function","functions":["createArray"]},{"kind":"similar","provenance":"machine","score":0.55,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2022-22950","published":"2022-04-01","fixed":"5.3.17","kev":false},{"cve":"CVE-2024-38808","published":"2024-08-20","fixed":"5.3.39","kev":false},{"cve":"CVE-2023-20861","published":"2023-03-23","fixed":"6.0.7","kev":false,"link":{"from":"CVE-2022-22950","to":"CVE-2023-20861","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.springframework:spring-expression","fromFixed":"5.3.17","toFixed":"5.3.26","daysApart":356}]}},{"cve":"CVE-2023-20863","published":"2023-04-13","fixed":"6.0.8","kev":false}],"package":"Maven:org.springframework:spring-expression"}}