CVE-2018-1257

score

<0.1

cvss

6.5

epss

3.0%

published

2018-05-11

kev added

—

first seen

2026-10-21

Spring Framework versions 5.0.x prior to 5.0.6, 4.3.x prior to 4.3.17, and older unsupported versions contain a denial of service caused by a regular expression vulnerability in the spring-messaging module, letting attackers craft messages to cause DoS, exploit requires access to the WebSocket endpoints.