CVE-2024-38829

A flaw was found in Spring LDAP. The usage of String.toLowerCase and String.toUpperCase has some locale dependent exceptions that could result in unintended columns being queried...

cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:default-auth-plugin (2.5.2) +642 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.2)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.585.9 and more Source cves: CVE-2024-38829 Source advisory: OSV:GHSA-MQVR-2RP8-J7H4...

com.github.ptomli.bedrock:bedrock-core (1.0.0), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +167 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (1.3.1.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - com.github.ptomli.bedrock:bedrock-core 1.0.0 -...

cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:default-auth-plugin (2.5.2) +642 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.2)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.585.9 and more Source cves: CVE-2024-38829 Source advisory: GHSA-MQVR-2RP8-J7H4...

CVE-2024-38829

creationtimestamp| type| source ---|---|--- 2024-12-04 21:15:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113596625680492138 2024-12-04 23:27:32+00:00| seen| https://t.me/cvedetector/12032...

CVE-2024-38829 vulnerabilities

Vulnerabilities for packages: apache-nifi...

DEBIAN-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), cc.chensoul.nacos:core-test (2.5.2) +868 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=1.3.0.release, <=2.4.2)

org.springframework.ldap:spring-ldap-core MAVEN version =1.3.0.release, =0.3.3, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.567.22 and more Source cves: CVE-2024-38829 Source advisory: MEND:CVE-2024-38829...

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5), com.almis.awe:awe-annotation (>=4.7.1, <=4.10.10) +124 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=3.0.0, <=3.2.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.10.10 and more Source cves: CVE-2024-38829 Source advisory: MEND:CVE-2024-38829...

CVE-2024-38829

CVE-2024-38829 is described as a vulnerability in Spring LDAP that enables data exposure due to case-sensitive comparisons. The issue affects Spring LDAP versions ranging from the earliest releases up to 2.4.3, and then 3.0.0–3.0.9, 3.1.0–3.1.7, and 3.2.0–3.2.7, including all versions prior to 2....

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...