onyx --cves cve-2022-22971

CVE-2022-22971

score: <0.1
cvss: 6.5
epss: 3.2%
published: 2022-05-12
kev added: —
first seen: 2026-10-21

Spring Framework versions prior to 5.3.20+ and 5.2.22+ contain a denial of service caused by insufficient validation in STOMP over WebSocket endpoint, letting authenticated users cause service disruption, exploit requires user authentication.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2022-05-12 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-770

References 3

https://tanzu.vmware.com/security/cve-2022-22971
https://security.netapp.com/advisory/ntap-20220616-0003/
https://www.oracle.com/security-alerts/cpujul2022.html