Priority MEDIUM 57
Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes.
Spring by VMware Tanzu
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Spring by VMware Tanzu records in CISA KEVNo Spring by VMware Tanzu vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2024-14858 CVE-2024-22271 · GHSA-j4r7-p9fp-w3f3
Spring Cloud Function Web DOS Vulnerability
Priority MEDIUM 42
In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions.
TI-2024-26054 CVE-2024-38827 · GHSA-q3v6-hm2v-pw99
Spring Security Authorization Bypass for Case Sensitive Comparisons
Priority LOW 22
The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly.