CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

🗓️ 18 Nov 2024 03:45:46Reported by vmwareType

Spring MVC controller DoS vulnerabilit

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-webmvc-5.3.27.jar	10 Jul 202508:59	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Virtualization Server and Rational Test Workbench are vulnerable to denial of service due to Spring MVC (CVE-2024-38828)	21 Mar 202518:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities	27 Mar 202516:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities (CVE-2024-38828,CVE-2024-38820)	3 Nov 202502:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.	12 Jan 202617:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data	22 Apr 202503:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	4 Dec 202514:43	–	ibm

[
  {
    "defaultStatus": "affected",
    "packageName": "Spring Framework",
    "product": "Spring",
    "vendor": "Spring",
    "versions": [
      {
        "lessThan": "5.3.42",
        "status": "affected",
        "version": "5.3.x",
        "versionType": "commercial"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2024-38828

18 Nov 2024 03:45Current

CVSS 3.15.3

EPSS0.00729