CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.2%

CVSS Severity

CVSS v3 Score 3.1

References

Products affected by CVE-2024-38820

Vmware » Spring Framework » Version: 5.3.0

cpe:2.3:a:vmware:spring_framework:5.3.0
Vmware » Spring Framework » Version: 5.3.1

cpe:2.3:a:vmware:spring_framework:5.3.1
Vmware » Spring Framework » Version: 5.3.10

cpe:2.3:a:vmware:spring_framework:5.3.10
Vmware » Spring Framework » Version: 5.3.11

cpe:2.3:a:vmware:spring_framework:5.3.11
Vmware » Spring Framework » Version: 5.3.12

cpe:2.3:a:vmware:spring_framework:5.3.12
Vmware » Spring Framework » Version: 5.3.13

cpe:2.3:a:vmware:spring_framework:5.3.13
Vmware » Spring Framework » Version: 5.3.14

cpe:2.3:a:vmware:spring_framework:5.3.14
Vmware » Spring Framework » Version: 5.3.15

cpe:2.3:a:vmware:spring_framework:5.3.15
Vmware » Spring Framework » Version: 5.3.16

cpe:2.3:a:vmware:spring_framework:5.3.16
Vmware » Spring Framework » Version: 5.3.17

cpe:2.3:a:vmware:spring_framework:5.3.17
Vmware » Spring Framework » Version: 5.3.18

cpe:2.3:a:vmware:spring_framework:5.3.18
Vmware » Spring Framework » Version: 5.3.19

cpe:2.3:a:vmware:spring_framework:5.3.19
Vmware » Spring Framework » Version: 5.3.2

cpe:2.3:a:vmware:spring_framework:5.3.2
Vmware » Spring Framework » Version: 5.3.20

cpe:2.3:a:vmware:spring_framework:5.3.20
Vmware » Spring Framework » Version: 5.3.21

cpe:2.3:a:vmware:spring_framework:5.3.21
Vmware » Spring Framework » Version: 5.3.22

cpe:2.3:a:vmware:spring_framework:5.3.22
Vmware » Spring Framework » Version: 5.3.23

cpe:2.3:a:vmware:spring_framework:5.3.23
Vmware » Spring Framework » Version: 5.3.24

cpe:2.3:a:vmware:spring_framework:5.3.24
Vmware » Spring Framework » Version: 5.3.25

cpe:2.3:a:vmware:spring_framework:5.3.25
Vmware » Spring Framework » Version: 5.3.26

cpe:2.3:a:vmware:spring_framework:5.3.26
Vmware » Spring Framework » Version: 5.3.27

cpe:2.3:a:vmware:spring_framework:5.3.27
Vmware » Spring Framework » Version: 5.3.28

cpe:2.3:a:vmware:spring_framework:5.3.28
Vmware » Spring Framework » Version: 5.3.29

cpe:2.3:a:vmware:spring_framework:5.3.29
Vmware » Spring Framework » Version: 5.3.3

cpe:2.3:a:vmware:spring_framework:5.3.3
Vmware » Spring Framework » Version: 5.3.30

cpe:2.3:a:vmware:spring_framework:5.3.30
Vmware » Spring Framework » Version: 5.3.31

cpe:2.3:a:vmware:spring_framework:5.3.31
Vmware » Spring Framework » Version: 5.3.32

cpe:2.3:a:vmware:spring_framework:5.3.32
Vmware » Spring Framework » Version: 5.3.33

cpe:2.3:a:vmware:spring_framework:5.3.33
Vmware » Spring Framework » Version: 5.3.34

cpe:2.3:a:vmware:spring_framework:5.3.34
Vmware » Spring Framework » Version: 5.3.35

cpe:2.3:a:vmware:spring_framework:5.3.35
Vmware » Spring Framework » Version: 5.3.36

cpe:2.3:a:vmware:spring_framework:5.3.36
Vmware » Spring Framework » Version: 5.3.37

cpe:2.3:a:vmware:spring_framework:5.3.37
Vmware » Spring Framework » Version: 5.3.38

cpe:2.3:a:vmware:spring_framework:5.3.38
Vmware » Spring Framework » Version: 5.3.39

cpe:2.3:a:vmware:spring_framework:5.3.39
Vmware » Spring Framework » Version: 5.3.4

cpe:2.3:a:vmware:spring_framework:5.3.4
Vmware » Spring Framework » Version: 5.3.40

cpe:2.3:a:vmware:spring_framework:5.3.40
Vmware » Spring Framework » Version: 5.3.5

cpe:2.3:a:vmware:spring_framework:5.3.5
Vmware » Spring Framework » Version: 5.3.6

cpe:2.3:a:vmware:spring_framework:5.3.6
Vmware » Spring Framework » Version: 5.3.7

cpe:2.3:a:vmware:spring_framework:5.3.7
Vmware » Spring Framework » Version: 5.3.8

cpe:2.3:a:vmware:spring_framework:5.3.8
Vmware » Spring Framework » Version: 5.3.9

cpe:2.3:a:vmware:spring_framework:5.3.9
Vmware » Spring Framework » Version: 6.0.0

cpe:2.3:a:vmware:spring_framework:6.0.0
Vmware » Spring Framework » Version: 6.0.1

cpe:2.3:a:vmware:spring_framework:6.0.1
Vmware » Spring Framework » Version: 6.0.10

cpe:2.3:a:vmware:spring_framework:6.0.10
Vmware » Spring Framework » Version: 6.0.11

cpe:2.3:a:vmware:spring_framework:6.0.11
Vmware » Spring Framework » Version: 6.0.12

cpe:2.3:a:vmware:spring_framework:6.0.12
Vmware » Spring Framework » Version: 6.0.13

cpe:2.3:a:vmware:spring_framework:6.0.13
Vmware » Spring Framework » Version: 6.0.14

cpe:2.3:a:vmware:spring_framework:6.0.14
Vmware » Spring Framework » Version: 6.0.15

cpe:2.3:a:vmware:spring_framework:6.0.15
Vmware » Spring Framework » Version: 6.0.16

cpe:2.3:a:vmware:spring_framework:6.0.16
Vmware » Spring Framework » Version: 6.0.17

cpe:2.3:a:vmware:spring_framework:6.0.17
Vmware » Spring Framework » Version: 6.0.18

cpe:2.3:a:vmware:spring_framework:6.0.18
Vmware » Spring Framework » Version: 6.0.19

cpe:2.3:a:vmware:spring_framework:6.0.19
Vmware » Spring Framework » Version: 6.0.2

cpe:2.3:a:vmware:spring_framework:6.0.2
Vmware » Spring Framework » Version: 6.0.20

cpe:2.3:a:vmware:spring_framework:6.0.20
Vmware » Spring Framework » Version: 6.0.21

cpe:2.3:a:vmware:spring_framework:6.0.21
Vmware » Spring Framework » Version: 6.0.22

cpe:2.3:a:vmware:spring_framework:6.0.22
Vmware » Spring Framework » Version: 6.0.23

cpe:2.3:a:vmware:spring_framework:6.0.23
Vmware » Spring Framework » Version: 6.0.24

cpe:2.3:a:vmware:spring_framework:6.0.24
Vmware » Spring Framework » Version: 6.0.3

cpe:2.3:a:vmware:spring_framework:6.0.3
Vmware » Spring Framework » Version: 6.0.4

cpe:2.3:a:vmware:spring_framework:6.0.4
Vmware » Spring Framework » Version: 6.0.6

cpe:2.3:a:vmware:spring_framework:6.0.6
Vmware » Spring Framework » Version: 6.0.7

cpe:2.3:a:vmware:spring_framework:6.0.7
Vmware » Spring Framework » Version: 6.0.8

cpe:2.3:a:vmware:spring_framework:6.0.8
Vmware » Spring Framework » Version: 6.0.9

cpe:2.3:a:vmware:spring_framework:6.0.9
Vmware » Spring Framework » Version: 6.1.0

cpe:2.3:a:vmware:spring_framework:6.1.0
Vmware » Spring Framework » Version: 6.1.1

cpe:2.3:a:vmware:spring_framework:6.1.1
Vmware » Spring Framework » Version: 6.1.10

cpe:2.3:a:vmware:spring_framework:6.1.10
Vmware » Spring Framework » Version: 6.1.11

cpe:2.3:a:vmware:spring_framework:6.1.11
Vmware » Spring Framework » Version: 6.1.12

cpe:2.3:a:vmware:spring_framework:6.1.12
Vmware » Spring Framework » Version: 6.1.13

cpe:2.3:a:vmware:spring_framework:6.1.13
Vmware » Spring Framework » Version: 6.1.2

cpe:2.3:a:vmware:spring_framework:6.1.2
Vmware » Spring Framework » Version: 6.1.3

cpe:2.3:a:vmware:spring_framework:6.1.3
Vmware » Spring Framework » Version: 6.1.4

cpe:2.3:a:vmware:spring_framework:6.1.4
Vmware » Spring Framework » Version: 6.1.5

cpe:2.3:a:vmware:spring_framework:6.1.5
Vmware » Spring Framework » Version: 6.1.6

cpe:2.3:a:vmware:spring_framework:6.1.6
Vmware » Spring Framework » Version: 6.1.7

cpe:2.3:a:vmware:spring_framework:6.1.7
Vmware » Spring Framework » Version: 6.1.8

cpe:2.3:a:vmware:spring_framework:6.1.8
Vmware » Spring Framework » Version: 6.1.9

cpe:2.3:a:vmware:spring_framework:6.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38820

Products

Pricing

Contact Us