onyx --cves cve-2021-22060

CVE-2021-22060

score: 4.4
cvss: 4.3
epss: 0.8%
published: 2022-01-10
kev added: —
first seen: 2026-10-21

Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions contain a log injection caused by processing malicious user input, letting attackers insert additional log entries, exploit requires user input to be malicious.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2022-01-10 Published
2026-10-16 First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
2026-10-21 Tracked by Onyx

Advisories

1 feed this week

ADV Multiples vulnérabilités dans les produits IBM (16 octobre 2026) CERT-FR (avis) · 2026-10-16

Weaknesses

NVD-CWE-noinfo

References 2

https://tanzu.vmware.com/security/cve-2021-22060
https://www.oracle.com/security-alerts/cpuapr2022.html