TLDR InfoSec · ATTACKS & VULNERABILITIES
ADMINS BETTER SPRING INTO ACTION OVER LATEST CRITICAL OPEN SOURCE VULN
Summary from the TLDR InfoSec newsletter
CVE-2024-38821 is a new critical vulnerability that affects Spring WebFlux applications with specific configurations. While rated 9.1 CVSS by Spring, Red Hat considers it moderate (7.4) due to limited scope. It only impacts apps using WebFlux with static resources and non-permitAll authorization rules.