CVE-2024-38809 — N/A / Spring Framework

CVE-2024-38809

N/A / Spring Framework PUBLISHED

Description (CNA)

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.

Affected (CNA)

Vendor / product	Versions
N/A / Spring Framework	affected 6.1.0 - 6.1.11, 6.0.0 - 6.0.22, 5.3.0 - 5.3.37

CWE

No CWE identifiers supplied.

References

https://spring.io/security/cve-2024-38809

ADP enrichment

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20240920-0003/

CISA-ADP

No English description supplied.

No references supplied.