TI-2022-10656 Aliases CVE-2022-27772 GHSA-cm59-pr5q-cw85

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary…

LOW 35CWE-668Published 2022-03-30 · Updated 2024-08-03

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that are no longer supported by the maintainer

Why it matters now

EPSS 0.00597 48th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed org.springframework.boot:spring-boot (Maven): 2.2.11.RELEASE

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA
—	org.springframework.boot:spring-boot (Maven)	before 2.2.11.RELEASE	2.2.11.RELEASE	Patch available	GHSA-cm59-pr5q-cw85

— Vendor— Affected all versions Fixed in — No fix listed CNA
org.springframework.boot:spring-boot (Maven) Vendor— Affected before 2.2.11.RELEASE Fixed in 2.2.11.RELEASE Patch available GHSA-cm59-pr5q-cw85

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:vmware:spring_boot::::::::	before 2.2.11	Vulnerable	VMware

cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:* Versions before 2.2.11 Vulnerable ·VMware

Remediation

Fix · GHSA-cm59-pr5q-cw85 org.springframework.boot:spring-boot (Maven) Fixed in 2.2.11.RELEASE Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2022-27772
2026-10-03 Alias added: GHSA-cm59-pr5q-cw85

References

Exploit 1

https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2022-27772

Other 2

TI-2017-05637 Improper input validation in Pivotal Spring Data REST and Spring Boot CVSS 3.0CRITICAL 9.8
TI-2023-07292 In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an… CVSS 3.1CRITICAL 9.8
TI-2026-29627 Missing authorization in VMware Spring Boot CVSS 3.1CRITICAL 9.1
TI-2021-08570 Element Plug-in for vCenter Server incorporates SpringBoot Framework. CVSS 3.1CRITICAL 9.8
TI-2026-18258 Authentication Bypass under Actuator CloudFoundry endpoints CVSS 3.1HIGH 8.2
TI-2026-18256 Authentication Bypass under Actuator Health groups paths CVSS 3.1HIGH 8.2

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences