Site icon API Security Blog

K000148278: Spring framework CVE-2024-38820 vulnerability

Security Advisory Description The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. (CVE-2024-38820) Impact There is no impact; F5 products are not affected by this…Read More

Exit mobile version