CVE-2024-38819

Description

The vulnerability exists due to input validation error when processing directory traversal sequences in applications that serve static resources through the functional web frameworks WebMvc.fn or WebFlux.fn. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

References

https://securityonline.info/spring-framework-vulnerability-cve-2024-38819-path-traversal-risk-in-web-apps/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3