In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in…

{
                    "product": "Spring Framework",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Spring Framework versions 5.3.x prior to 5.3.20, 5.2.x prior to 5.2.22 and all old and unsupported versions"
                        }
                    ]
                }