{"action":"Upgrade org.springframework:spring-webmvc to 5.3.42 or later.","affected":[{"fixed":"5.3.42","introduced":"5.3.0"}],"component":"org.springframework:spring-webmvc","cve_ids":["CVE-2024-38828"],"ecosystem":"Maven","epss":0.00724,"exploited":false,"fixed_versions":["5.3.42"],"ghsa_id":"GHSA-w3c8-7r8f-9jp8","id":"tcs_01M5N9F91BNN3KRKF7J766KC3D","modified_at":"2025-05-09T21:35:47Z","published_at":"2024-11-18T06:30:35Z","references":["https://osv.dev/vulnerability/GHSA-w3c8-7r8f-9jp8","https://nvd.nist.gov/vuln/detail/CVE-2024-38828","https://github.com/spring-projects/spring-framework","https://security.netapp.com/advisory/ntap-20250509-0009","https://spring.io/security/cve-2024-38828"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w3c8-7r8f-9jp8","url":"https://osv.dev/vulnerability/GHSA-w3c8-7r8f-9jp8"}],"summary":"Spring MVC controller vulnerable to a DoS attack"}