CVE-2022-27772

Published March 30th, 2022

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that are no longer supported by the maintainer

JLLeitschuh/security-research

Public disclosure channel for security vulnerabilities

GitHub