ROOT-APP-MAVEN-CVE-2024-38820 CVE-2024-38820 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38820 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly. Related to CVE-2024-38820...