CVE-2024-38819

🗓️ 19 Dec 2024 17:15:12Reported by vmwareType

Applications using WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks via HTTP requests.

Reporter	Title	Published	Views	Family All 90
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Nov 2024	26 Nov 202409:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities	27 Mar 202516:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring WebMvc affects watsonx.data	7 Feb 202510:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Mar 202510:38	–	ibm
IBM Security Bulletins	Security Bulletin: vulerability in IBM Spectrum Symphony with spring webmvc	23 Oct 202520:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.	12 Jan 202617:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to spring-webmvc-6.1.11.jar CVE-2024-38819	28 Jan 202522:08	–	ibm

[
  {
    "defaultStatus": "unaffected",
    "product": "Spring Framework",
    "vendor": "N/A",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Framework 5.3.0 - 5.3.40, 6.0.0 - 6.0.24, 6.1.0 - 6.1.13"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2024-38819

19 Dec 2024 17:15Current

CVSS 3.17.5

EPSS0.54862

CWE-22