CVE-2024-38828

Summary

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://security.netapp.com/advisory/ntap-20250509-0009/

References

• https://spring.io/security/cve-2024-38828

• ←Previous
• Next→