CVE-2024-38809
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Nov 21, 2024
CWE ID 400
Summary
CVE-2024-38809: This vulnerability exposes applications to Denial of Service (DoS) attacks due to improper handling of ETags in "If-Match" and "If-None-Match" request headers. Affected applications may crash or consume excessive resources leading to service disruption. To mitigate this risk, users are strongly advised to upgrade to the patched version as soon as possible. Alternatively, older unsupported systems can impose a size limit on these headers via filtering mechanisms to limit potential damage.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Vmware Spring Framework
Affected Vendors
- VMware Inc.