Maven/org.springframework:spring-webflux CVE-2024-38819: high 7.5, EPSS 56.04%

Spring Framework Path Traversal vulnerability

Action: Upgrade org.springframework:spring-webflux to 6.1.14 or later.

Affected

Fixed versions

Sources

• osv: GHSA-g5vr-rgqm-vf78
• https://nvd.nist.gov/vuln/detail/CVE-2024-38819
• https://github.com/spring-projects/spring-framework/issues/33689
• https://github.com/spring-projects/spring-framework/commit/3bfbe30a7814c9ea1556d40df9bd87ddb3ba372d
• https://github.com/spring-projects/spring-framework/commit/fb7890d73975a3d9e0763e0926df2bd0a608e87e
• https://github.com/spring-projects/spring-framework
• https://security.netapp.com/advisory/ntap-20250110-0010
• https://spring.io/security/cve-2024-38819

CVE-2024-38819 · published 2024-12-19T18:31:38Z · modified 2026-09-28T16:00:23.315362856Z · JSON