CVE-2021-22118

score

4.4

cvss

7.8

epss

0.4%

published

2021-05-27

kev added

—

first seen

2026-10-21

Spring Framework 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.7 contain a privilege escalation caused by (re)creating the temporary storage directory, letting locally authenticated attackers read or modify uploaded files or overwrite arbitrary files, exploit requires local authentication.