Lucene search
K

8 matches found

OSV
OSV
added 2024/11/18 6:30 a.m.25 views

GHSA-W3C8-7R8F-9JP8 Spring MVC controller vulnerable to a DoS attack

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS5AI score0.00076EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/11/18 6:30 a.m.208 views

Spring MVC controller vulnerable to a DoS attack

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.7AI score0.00076EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/11/18 4:15 a.m.1 views

UBUNTU-CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.8AI score0.00076EPSS
Exploits0References3
CVE
CVE
added 2024/11/18 3:45 a.m.220 views

CVE-2024-38828

CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] parameter are vulnerable to DoS (Uncontrolled Resource Consumption). Publicly documented in IBM OpenPages and related Bulletins; impact centers on Spring MVC data binding and request body handling. Remediation in affected I...

5.3CVSS5AI score0.00076EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/11/18 3:45 a.m.16 views

CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.5AI score0.00076EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/11/17 12:0 a.m.3 views

PT-2024-28235 · Unknown +1 · Spring Mvc +1

Name of the Vulnerable Software and Affected Versions: Spring MVC affected versions not specified Description: The issue concerns Spring MVC controller methods that utilize an @RequestBody byte method parameter, making them susceptible to Denial of Service DoS attacks. Recommendations: At the...

5.3CVSS7.7AI score0.00076EPSS
Exploits0References17
Metasploit
Metasploit
added 2024/04/10 7:54 p.m.238 views

Rancher Audit Log Sensitive Information Leak

Rancher versions between 2.6.0-2.6.13, 2.7.0-2.7.9, 2.8.0-2.8.1 inclusive contain a vulnerability where sensitive data is leaked into the audit logs. Rancher Audit Logging is an opt-in feature, only deployments that have it enabled and have AUDITLEVEL set to 1 or above are impacted by this issue...

8.4CVSS6.5AI score0.4519EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/03/14 11:15 a.m.3 views

CVE-2022-22721

If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier...

9.1CVSS7.4AI score0.13473EPSS
Exploits0References20Affected Software1
Rows per page
Query Builder