Beveiligingsadvies

CVE-2026-59274

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-27 05:20:35
Laatst bijgewerkt 2026-08-27 14:13:56
Toegewezen door vmware
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12