CVE-2022-22979

Published: Jun 21, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.

Affected (1)

Products: Vmware: Spring Cloud Function

1 product

Spring Cloud Function

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Cloud Function	Before 3.2.6

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://tanzu.vmware.com/security/cve-2022-22979

Source: security@vmware.com

Vendor Advisory

https://tanzu.vmware.com/security/cve-2022-22979

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.