Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Spring by VMware Tanzu Clear all filters
TI-2024-26054 CVE-2024-38827 · GHSA-q3v6-hm2v-pw99

Spring Security Authorization Bypass for Case Sensitive Comparisons

Priority LOW 22

The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00377 Published 2024-12-02 Partial fix · 5.7.14, 5.8.16 +4 CWE-639
TI-2024-14858 CVE-2024-22271 · GHSA-j4r7-p9fp-w3f3

Spring Cloud Function Web DOS Vulnerability

Priority MEDIUM 42

In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00364 Published 2024-07-09 Partial fix · 4.0.8, 4.1.2 CWE-20