CVE-2023-34053

score

<0.1

cvss

5.3

epss

1.2%

published

2023-11-28

kev added

—

first seen

2026-10-21

Spring Framework versions 6.0.0 - 6.0.13 contain a denial-of-service caused by specially crafted HTTP requests when using Spring MVC or Spring WebFlux with micrometer-core and an ObservationRegistry configured, letting attackers cause application disruption, exploit requires specific configuration and request crafting.