CVE-2024-22233

score

<0.1

cvss

7.5

epss

1.0%

published

2024-01-22

kev added

—

first seen

2026-10-21

Spring Framework 6.0.15 and 6.1.2 contain a denial-of-service caused by specially crafted HTTP requests in applications using Spring MVC with Spring Security 6.1.6+ or 6.2.1+ on the classpath, letting attackers cause service disruption, exploit requires all conditions to be met.