CVE-2024-38809

Summary

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.

Users of affected versions should upgrade to the corresponding fixed version.

Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.

Affected Software

Weaknesses

• Spring Framework DoS via conditional HTTP request

ADP Enrichment

CVE Program Container

Additional References

• https://security.netapp.com/advisory/ntap-20240920-0003/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://spring.io/security/cve-2024-38809

• ←Previous
• Next→