TLDR InfoSec · ATTACKS & VULNERABILITIES

ADMINS BETTER SPRING INTO ACTION OVER LATEST CRITICAL OPEN SOURCE VULN

theregister.com3 min read

Summary from the TLDR InfoSec newsletter

CVE-2024-38821 is a new critical vulnerability that affects Spring WebFlux applications with specific configurations. While rated 9.1 CVSS by Spring, Red Hat considers it moderate (7.4) due to limited scope. It only impacts apps using WebFlux with static resources and non-permitAll authorization rules.