CVE-2021-22096

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-22096
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22096.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-22096
Aliases
Downstream
Published
2021-10-28T16:15:07.733Z
Modified
2026-02-16T05:07:15.603125Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

References

Affected packages

Git
github.com/jquery-validation/jquery-validation

Affected ranges

Type
GIT
Repo
https://github.com/jquery-validation/jquery-validation
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b5d5b45eb5d964fc6f85a41148f2d97bcabe9fda

Affected versions

1.*
1.6.0
1.7.0
1.8.0
1.8.0pre
1.8.1
1.9.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22096.json"
github.com/spring-projects/spring-framework

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-framework
Events
Introduced
5acffaa72da10ba42fe547eeea44d8615cbf99b9
Last affected
21c3b51e1fcf0a20f9880d280a71cbace4905e41
Introduced
927b8c15ef20eaaa4002d4b2170cc536a6d6aa35
Last affected
e45e77fd47e38d008fff7151f47a49f0c4a38d3b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22096.json"