Exposure of Spring

Web frameworks

13

exposure score

1,312

sites use

0

exploited

1

critical

CVEs

5 results

CVE-2024-38816HIGHCVE-2024-38816: Path traversal vulnerability in functional web frameworksEPSS 14.7%CVE-2024-38821CRITICALAuthorization Bypass of Static Resources in WebFlux ApplicationsEPSS 1.7%CVE-2024-38828MEDIUMCVE-2024-38828: DoS via Spring MVC controller method with byte[] parameterEPSS 0.7%CVE-2024-38820LOWCVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionEPSS 0.6%CVE-2024-22258MEDIUMCVE-2024-22258: PKCE Downgrade in Spring Authorization ServerEPSS 0.5%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →