This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-38809 | BDVDB-2026-249462 Detail

Spring Framework

Description#

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-400 Uncontrolled Resource Consumption

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.