CVE-2024-38820 — CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potential…
Published: 2024-10-18 · CVSS: 3.1 · CVSS 3.1
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7