An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS).

Specifically, an application is vulnerable when the following condition is met:

• The application accepts and evaluates untrusted or user-controlled SpEL expressions.