Skip to content

Product

org.springframework.integration/spring-integration-core vulnerabilities

1 published CVE affecting org.springframework.integration/spring-integration-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.integration/spring-integration-core CVEs

Newest publication first

  1. CVE-2020-5413 Code execution in Spring Integration

    CriticalCVSS 9.8 EPSS 4.4%

    Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when provided data con...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.