Aller au contenu
en Se connecter
7.5 Élevée

CVE-2024-38819 Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to…

Description

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring Framework Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Spring Framework

Les 13 CVE de Spring Framework →
CVE-2024-38809 Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack 5.3 Moyenne CVE-2023-20863 In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a… 6.5 Moyenne CVE-2023-20860 Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security… 7.5 Élevée CVE-2023-20861 In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported… Non notée
Suivre cette CVE