Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-context

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2025-22233

    Spring Framework DataBinder Case Sensitive Match Exception

    CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Produ…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Low 3.1
    CVE-2024-38820 Public exploit

    CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

    The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

    VMware Spring libspring-java libspring-java Debian Ubuntu Maven