Spring (Vmware) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 230 known versions, newest CVE from 2024-11-18. Vendor: Vmware.

CVEs of Spring

• CVE-2024-38828 - CVSS 5.3 (medium), 2024-11-18: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.
• CVE-2024-38820 - CVSS 5.3 (medium), 2024-10-18: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions…