Spring MVC controller vulnerable to a DoS attack

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-38828 · ADVISORY
• spring-projects/spring-framework · PACKAGE
• security.netapp.com/advisory/ntap-20250509-0009 · WEB
• spring.io/security/cve-2024-38828 · WEB
• security.netapp.com/advisory/ntap-20250509-0009

Lỗ hổng khác của org.springframework:spring-webmvc

• CVE-2026-47890NGHIÊM TRỌNG 9.8Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Fram…
• CVE-2026-47884NGHIÊM TRỌNG 9.8Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view r…
• CVE-2026-41853TRUNG BÌNH 5.3Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 throug…
• CVE-2026-41846TRUNG BÌNH 6.1Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbi…
• CVE-2026-41845TRUNG BÌNH 6.1Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the browser, potentially r…