Description
In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message
Remediation
References
https://tanzu.vmware.com/security/cve-2021-22097
Related Vulnerabilities
CVE-2012-0391 Vulnerability in maven package com.opensymphony:xwork-core
CVE-2017-0783 Vulnerability in maven package org.apache.openmeetings:openmeetings-web
CVE-2020-5408 Vulnerability in maven package org.springframework.security:spring-security-core
CVE-2019-3772 Vulnerability in maven package org.springframework.integration:spring-integration-ws
CVE-2023-34235 Vulnerability in npm package @strapi/database