CVE-2021-22118

Name	CVE-2021-22118
Description	In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libspring-java (PTS)	jessie, jessie (lts)	3.0.6.RELEASE-17+deb8u2	fixed
	stretch (security), stretch (lts), stretch	4.3.5-1+deb9u1	fixed
	buster	4.3.22-4	fixed
	bullseye	4.3.30-1	fixed
	sid, trixie, bookworm	4.3.30-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libspring-java	source	(unstable)	(not affected)

Notes

- libspring-java <not-affected> (Introduced in v5.0.0.RC1)
https://tanzu.vmware.com/security/cve-2021-22118
https://github.com/spring-projects/spring-framework/issues/26931
https://github.com/spring-projects/spring-framework/commit/cce60c479c22101f24b2b4abebb6d79440b120d1