CyberRota Analysis
AI-GeneratedSpring Batch's FlatFileItemReader is vulnerable to a denial-of-service condition due to improper handling of multi-line records in specially crafted input files, which can lead to excessive CPU and memory consumption. This can cause batch jobs to stall or exhaust system resources, impacting application performance. Organizations using affected versions of Spring Batch (6.0.0 - 6.0.4, 5.2.0 - 5.2.6, and 4.3.0 - 4.3.13) should prioritize remediation to prevent potential disruptions in processing.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume excessive CPU time and memory, causing the batch job to stall or run out of memory. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.0 - 5.2.6 Spring Batch 4.3.0 - 4.3.13
Related CVEs
Other vulnerabilities affecting the same vendor(s)