Project Reactor Security Advisories

All advisories

This page list the Project Reactor advisories. Additional information on other VMware Products can be found on the VMware Security Advisories page.

Spring Boot Welcome Page DoS Vulnerability

MEDIUM | 10/19/2022 | CVE-2022-31684

Description In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service (DoS) attack if Spring MVC is used together with a reverse proxy cache. Specifically, an application is vulnerable if all of the conditions are true: The application has Spring MVC auto-configuration enabled. This is the case…

Reporting a vulnerability

The VMware Security Response team provides a single point of contact for the reporting of security vulnerabilities in VMware Tanzu products and coordinates the process of investigating any reported vulnerabilities.

To report a security vulnerability in a VMware service or product please refer to the VMware Security Response Policy.