CVE
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.
Endor Patches
Patch Name
Vulnerabilities fixed
Lines of Code Changed