CVE-2024-38807: spring spring boot Authentication Bypass by Spoofing
CVSS: 6.3v3.1MediumDeferred
AliasesUBUNTU-CVE-2024-38807DEBIAN-CVE-2024-38807GHSA-7cj3-x93g-gj76
Published 23-08-2024Last modified 27-03-2025
Vulnerability summary
CVE-2024-38807 is a medium (CVSS 6.3) Authentication Bypass by Spoofing vulnerability in spring spring boot. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.8% of scored vulnerabilities.
CVSS score
6.3/10
010
Medium · v3.1 (CVE.org)EPSS score
0.12%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 23-08-2024PublishedVulnerability first disclosed.
- 27-03-2025Last modifiedVulnerability information updated.
Description
Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.
CVSS metrics
6 scores · 5 sources · 2 versionsHigh 7.2Preferred score · OSV · Maven (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:NSourcesSingle source
Medium 6.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:NSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- OSV · MavenEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- NVDNIST6.3MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.12% on 18-09-2026
18-09-202618-10-2026
EPSS score0.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-290Authentication Bypass by SpoofingThis attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
- CWE-347Improper Verification of Cryptographic SignatureThe product does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected systems
Org.springframework.boot2 products
- spring-boot-loader≥ 2.7.0, < 2.7.22 | ≥ 3.0.0, < 3.0.17 | ≥ 3.1.0, < 3.1.13 | ≥ 3.2.0, < 3.2.9 | ≥ 3.3.0, < 3.3.3
- spring-boot-loader-classic≥ 2.7.0, < 2.7.22 | ≥ 3.0.0, < 3.0.17 | ≥ 3.1.0, < 3.1.13 | ≥ 3.2.0, < 3.2.9 | ≥ 3.3.0, < 3.3.3
Debian1 product
- libspring-javaAll versions (No fix recorded)
Spring1 product
- spring boot≥ 2.7.x, < 2.7.22 | ≥ 3.0.x, < 3.0.17 | ≥ 3.1.x, < 3.1.13 | ≥ 3.2.x, < 3.2.9 | ≥ 3.3.x, < 3.3.3
Ubuntu1 product
- libspring-javaAll versions (No fix recorded)
4 vendors · 5 products
