Red Hat Security Advisory

RHSA-2021:0292

Red Hat support for Spring Boot 2.3.6 security update

Released 2021-02-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat support for Spring Boot 2.3.6

Fixes 2 records

TI-2020-09655 CVE-2020-11996 · GHSA-53hp-jpwq-2jgq

Uncontrolled resource consumption in Apache Tomcat

MEDIUM 61

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26699 Published 2020-06-26 Partial fix · 10.0.0-M5, 9.0.35 +1 CWE-400

TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

SQL injection in hibernate-core

MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89