Lucene search
K

183 matches found

Vulnrichment
Vulnrichment
added 2024/11/18 3:45 a.m.20 views

CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS7.1AI score0.00076EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/18 3:45 a.m.49 views

CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS0.00076EPSS
Exploits0References1
CVE
CVE
added 2024/11/18 3:45 a.m.218 views

CVE-2024-38828

CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] parameter are vulnerable to DoS (Uncontrolled Resource Consumption). Publicly documented in IBM OpenPages and related Bulletins; impact centers on Spring MVC data binding and request body handling. Remediation in affected I...

5.3CVSS5AI score0.00076EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/11/18 3:45 a.m.16 views

CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.5AI score0.00076EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/11/18 12:0 a.m.16 views

VMware Spring Framework < 5.3.42 DoS Vulnerability - Linux

The VMware Spring Framework is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS6.4AI score0.00076EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/17 12:0 a.m.3 views

PT-2024-28235 · Unknown +1 · Spring Mvc +1

Name of the Vulnerable Software and Affected Versions: Spring MVC affected versions not specified Description: The issue concerns Spring MVC controller methods that utilize an @RequestBody byte method parameter, making them susceptible to Denial of Service DoS attacks. Recommendations: At the...

5.3CVSS7.7AI score0.00076EPSS
Exploits0References17
Atlassian
Atlassian
added 2024/11/06 6:11 a.m.32 views

Path Traversal org.springframework:spring-webmvc Dependency in Confluence Data Center and Server

This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS7.1AI score0.9389EPSS
Exploits1
GithubExploit
GithubExploit
added 2024/11/05 4:30 p.m.339 views

Exploit for Code Injection in Vmware Spring_Framework

Expoitation-de-la-vuln-rabilit-CVE-2022-22965 La vulnérabilité...

9.8CVSS9AI score0.94428EPSS
Exploits99
Spring Engineering
Spring Engineering
added 2024/04/30 12:0 a.m.16 views

Spring Tips: Spring Cloud Gateway for Spring MVC

Hi, Spring fans! In this installment, we revisit Spring Cloud Gateway, this time to look at the fantastic new support for Spring MVC, made all the more amazing by Java 21's virtual threads...

7.2AI score
Exploits0
Veracode
Veracode
added 2024/01/24 10:21 a.m.27 views

Denial Of Service (DoS)

org.springframework: spring-core is vulnerable to Denial of Service DoS. The vulnerability is due to the mishandling of specially crafted HTTP requests, which can result in Denial of Service DoS. As a prerequisite, Spring MVC and Spring Security must be on the classpath for this vulnerability to ...

7.5CVSS6.6AI score0.01539EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2024/01/22 9:2 p.m.96 views

CVE-2024-22233

A flaw was found in the Spring Framework. This issue may allow a remote user to provide specially crafted HTTP requests, leading the application to a Denial of Service DoS. An application may be considered vulnerable if it meets the both conditions: The application uses Spring MVC and Spring...

7.5CVSS7.2AI score0.01539EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/01/22 3:30 p.m.55 views

Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.4AI score0.01539EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/01/22 1:15 p.m.26 views

CVE-2024-22233

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.5AI score0.01539EPSS
Exploits0References2
OSV
OSV
added 2024/01/22 1:15 p.m.21 views

CVE-2024-22233

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.4AI score0.01539EPSS
Exploits0References2
Prion
Prion
added 2024/01/22 1:15 p.m.25 views

Memory corruption

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

5CVSS7.4AI score0.01539EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2024/01/22 1:15 p.m.35 views

CVE-2024-22233

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.1AI score0.01539EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/01/22 12:16 p.m.32 views

CVE-2024-22233 CVE-2024-22233: Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.7AI score0.01539EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/22 12:16 p.m.2 views

CVE-2024-22233 CVE-2024-22233: Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.4AI score0.01539EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/01/22 12:16 p.m.32 views

CVE-2024-22233

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

7.5CVSS7.4AI score0.01539EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/11/30 12:0 a.m.24 views

VMware Spring Boot 2.7.0 - 2.7.17, 3.0.0 - 3.0.12, 3.1.0 - 3.1.5 DoS Vulnerability

VMware Spring Boot is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7AI score0.00846EPSS
Exploits0References4
Rows per page
Query Builder