CVE-2026-47881
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume excessive CPU time and memory, causing the batch job to stall or run out of memory. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.0 - 5.2.6 Spring Batch 4.3.0 - 4.3.13
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Spring | Spring Batch | 6.0.0 <= 6.0.4 | affected |
| Spring | Spring Batch | 5.2.0 <= 5.2.6 | affected |
| Spring | Spring Batch | 4.3.0 <= 4.3.13 | affected |
Weaknesses
- CWE-400 Uncontrolled Resource Consumption
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.