CVE-2022-22971 @ Maven-org.springframework:spring-core-3.2.4.RELEASE

[cxronen]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2022-22971
Checkmarx Project: cxronen/BookStore_VSCode
Repository URL: https://github.com/cxronen/BookStore_VSCode
Branch: master
Scan ID: 7c24212b-2b21-4248-ba1f-b86776f5d0c2

---

In Spring Framework versions 5.2.0 through 5.2.21, 5.3.0 through 5.3.19, and older unsupported versions, application with a "STOMP" over "WebSocket" endpoint is vulnerable to a Denial of Service attack by an authenticated user.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 4.0.0.M3