Vendor

Spring by VMware Tanzu

3 known vulnerabilities.

Products

Spring Security 1 Spring Cloud Skipper 1 Spring Cloud Function Framework 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.8

CVE-2024-38827

Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly.

Spring by VMware Tanzu Spring Security thingsboard org.springframework.security:spring-security-core Wolfi Maven

Dec 2, 2024