Spring Framework < 5.3.39 / 6.0.x < 6.0.23 / 6.1.x < 6.1.12 HTTP Request DoS (CVE-2024-38809)

medium Nessus Plugin ID 206149

Version 1.5

Oct 7, 2024, 1:27 PM

  • Plugin categorization (adding new 'component' to component plugins)

Plugin Feed: 202410071327

Version 1.4

Sep 30, 2024, 7:18 AM

  • CVSS metrics ("CVSSv3 score" set to 5.3)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L")

Plugin Feed: 202409300718

Version 1.3

Sep 20, 2024, 11:17 AM

  • IAVM reference

Plugin Feed: 202409201117

Version 1.2

Aug 26, 2024, 7:09 AM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "False")
  • Exploit attributes ("Exploitability ease" set to "No known exploits are available")

Plugin Feed: 202408260709

Version 1.1

Aug 23, 2024, 1:44 PM

  • New

Plugin Feed: 202408231344

* Changelogs are generally available for changes made after Nov 1, 2022