Spring Cloud Contract

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-22236 Jan 31, 07:15 Maven MEDIUM PATCH This Month

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Java Information Disclosure Google VMware Spring Cloud Contract

NVD

CVSS 3.1

5.5

EPSS

0.2%

CVE-2024-22236 Maven

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Java Information Disclosure Google +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy