CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.

References

Affected packages

Git / github.com/spring-projects/spring-framework

Affected ranges

Type

GIT

Repo

https://github.com/spring-projects/spring-framework

Events

Introduced

Fixed

927b8c15ef20eaaa4002d4b2170cc536a6d6aa35

Introduced

927b8c15ef20eaaa4002d4b2170cc536a6d6aa35

Last affected

cfa701b8726f06528e9d408b1b94f333f70da45f

Introduced

5acffaa72da10ba42fe547eeea44d8615cbf99b9

Last affected

707a24c48b21fc35e8be715afc80f020a24a9714

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.2.0"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "last_affected": "5.2.20"
        },
        {
            "introduced": "5.3.0"
        },
        {
            "last_affected": "5.3.18"
        }
    ]
}

Affected versions

v3.*

v3.2.0.M1

v3.2.0.M2

v3.2.0.RC1

v3.2.0.RC2-A

v3.2.0.RELEASE

v4.*

v4.0.0.M1

v4.0.0.M2

v4.0.0.M3

v4.0.0.RC1

v4.0.0.RC2

v5.*

v5.2.20.RELEASE

v5.3.18

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.29"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-22968.json"