1 matches found
GHSA-4WP7-92PW-Q264 Spring Framework DataBinder Case Sensitive Match Exception
CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: 6.2...
3.1CVSS6.8AI score0.00351EPSS
SaveExploits0References6
20