CVE-2021-22096

score

4.4

cvss

4.3

epss

1.4%

published

2021-10-28

kev added

—

first seen

2026-10-21

Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions contain a log injection vulnerability caused by insufficient sanitization of user input, letting attackers insert malicious log entries, exploit requires user to provide malicious input.