Known vulnerabilities in VMware Spring
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-38828 | Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack | 5.3 Medium | Nov 18, 2024 |
| CVE-2024-38820 | The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive | 3.1 Low | Oct 18, 2024 |