Back to Database
Status published
High
CVE-2024-38819
Applications serving static resources through the functional web frameworks WebMvc.fn...
Vulnerability Description
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-38819
Credits & Attribution
No credits recorded in the NVD database.
References
More from N/A
View All →CVE-2025-8083
Vuetify Prototype Pollution via Preset options
High
8.6
CVE-2025-8082
Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Medium
6.3
CVE-2025-22217
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability...
High
8.6
CVE-2025-1461
Vuetify XSS through 'eventMoreText' prop of VCalendar
Medium
5.6
CVE-2025-14505
Elliptic Cryptanalysis vulnerability when `k` has leading zeros
Medium
5.6
Affected Vendor
Affected Software
Spring Framework
Vulnerable Versions:
Spring Framework 5.3.0 - 5.3.40, 6.0.0 - 6.0.24, 6.1.0 - 6.1.13
Timeline
Official Publish:
December 19th, 2024
Last Modified:
January 10th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N