CVE-2022-38113

This vulnerability discloses build and services versions in the server response header.

CVE-2022-38115

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT