CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - security@vmware.com

Published

2024-11-18

Last modified

2025-05-09

Weaknesses

CWE-400

Affected products

• Spring (Spring)
• Spring (Vmware)

References

• https://spring.io/security/cve-2024-38828
• https://security.netapp.com/advisory/ntap-20250509-0009/