{"schemaVersion":3,"id":"CVE-2024-38820","aliases":["UBUNTU-CVE-2024-38820","DEBIAN-CVE-2024-38820","CGA-28x8-xwjg-qwgj","CGA-2wj6-vc3g-xq8w","CGA-3rfx-xj5r-m7qx","CGA-4whw-xp49-xgg6","CGA-6h4g-3p43-r3fq","CGA-6h77-qc2x-rqmm","CGA-757q-fghj-q9vf","CGA-9f65-5m2r-4793","CGA-c469-jvwm-9gvc","CGA-f4pc-xgmh-jmjr","CGA-fwjw-62r7-6mwr","CGA-h3p2-2p5f-v697","CGA-p2cf-4hhc-g438","CGA-pr8w-6qr9-pvx5","CGA-qqvr-fj33-cxcq","CGA-r4jr-7f3v-8jwx","CGA-22cx-gh62-cg3f","CGA-252c-r2g8-v5hg","CGA-253f-rj5f-qwjm","CGA-2pp5-w8ww-rxqx","CGA-2qm3-jf7c-p98h","CGA-39hx-qf86-j6p3","CGA-3gph-pfxh-pm92","CGA-3jg6-5665-9g85","CGA-3pm3-5hqh-f3jx","CGA-3r58-4j76-wq2f","CGA-4g87-r2vq-prpq","CGA-4q4m-wgqf-w822","CGA-4q8v-c3vg-7pcc","CGA-5257-xj6w-qcf7","CGA-53gm-q82p-hw8f","CGA-563c-9qg8-pm9f","CGA-597p-4ch9-x4w2","CGA-59h4-f858-pjfp","CGA-5mgv-h8x6-cm7g","CGA-683v-w6wx-2crm","CGA-69h2-vmmg-ccm2","CGA-69mx-x2v4-x576","CGA-6fgj-8j88-ccr9","CGA-6jm8-vhxr-c6mv","CGA-6q98-c829-f9xg","CGA-6rmp-pf82-45ph","CGA-6rv3-3mqj-447r","CGA-74pq-xpjv-fxcq","CGA-75mg-wp7g-fw2q","CGA-7wj2-2x8c-hv78","CGA-7x2h-ppc3-4445","CGA-7xw7-qjmf-85rc","CGA-82fq-p627-p5ph","CGA-85r4-5hgx-3fp7","CGA-8g79-crg3-fp6v","CGA-8gmh-23jq-vm89","CGA-8q9q-fr2x-3qvv","CGA-8rg2-6w34-xfvx","CGA-94vx-4x83-cv6w","CGA-95f9-c5v7-8vr7","CGA-95xg-g9vf-mx4v","CGA-96p7-7xqg-wcwg","CGA-9c77-g3fx-3cjh","CGA-9hh8-2xx5-hf33","CGA-9m44-5cgr-4x9j","CGA-9p5r-488r-rq3c","CGA-c2j5-fg63-464h","CGA-c2pp-7xjr-pfq6","CGA-c6jp-jhqh-3xv2","CGA-ccjq-gvwg-2grv","CGA-cfm5-m55h-3cqc","CGA-cmwh-4hhw-pv2v","CGA-cr9w-r97v-qmjr","CGA-f4jp-vx48-29rw","CGA-fjw7-3w49-frmg","CGA-fm75-mw5m-992f","CGA-g2w3-m8c8-gfmm","CGA-g5c5-f9mf-j924","CGA-g9m6-cf34-7qwp","CGA-gcx4-mpqj-89pq","CGA-gmq7-wvqm-xgq5","CGA-gvv8-5686-wpx7","CGA-hpv9-vhrr-jgxp","CGA-j26c-w485-hjpm","CGA-j56q-hh5h-gw42","CGA-j943-9cvg-72hc","CGA-m73m-cx7g-q4vg","CGA-mc93-jrm9-9g3r","CGA-mj75-7v8c-r7jq","CGA-mw44-mqxq-q9rg","CGA-p39c-3g53-rh53","CGA-p5r4-26qr-pp23","CGA-pqxx-pqh9-jv3v","GHSA-4gc7-5j7h-4qph","CGA-q28h-vc88-fx7p","CGA-q2hj-85vh-vpr8","CGA-q39j-wfc9-5jfp","CGA-qcwf-vjx7-664c","CGA-qf7m-hwwm-33c4","CGA-qg2x-x9g8-29qw","CGA-qw52-76w4-4j5p","CGA-r762-wcvr-gx4m","CGA-r9pm-g4m2-2hvr","CGA-rfcx-rh69-wqmx","CGA-vc9c-c6r7-486m","CGA-vm3w-vj84-gvwp","CGA-w8f6-hpgg-vffh","CGA-wg46-7jmh-xx6h","CGA-wwf9-g3w2-x6xm","CGA-x83f-22cc-7h6h","CGA-xjfh-jj2g-28vw","CGA-xjh9-qc52-478v","CGA-xr62-5mgq-25wq"],"status":"published","duplicateOf":null,"title":null,"description":"The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.","dates":{"published":"2024-10-18T05:39:05.275Z","modified":"2024-11-29T12:04:41.387Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00617,"percentile":0.48605,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00617},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00617,"percentile":0.48605}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00617,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00617,"percentile":0.48605}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-178","name":"Improper Handling of Case Sensitivity","description":"The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/178.html"}],"affected":[{"vendor":"chainguard","product":"apache-activemq-5.19","name":"apache-activemq-5.19","label":"apache-activemq-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-fips-5.19","name":"apache-activemq-fips-5.19","label":"apache-activemq-fips-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-fips-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27","name":"geoserver-2.27","label":"geoserver-2.27","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28","name":"geoserver-2.28","label":"geoserver-2.28","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28-community","name":"geoserver-2.28-community","label":"geoserver-2.28-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28-community","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.0","name":"kayenta-2025.0","label":"kayenta-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.1","name":"kayenta-2025.1","label":"kayenta-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.2","name":"kayenta-2025.2","label":"kayenta-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.4","name":"kayenta-2025.4","label":"kayenta-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.4","purlType":"apk","versions":[{"text":"< 2025.4.3-r7","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2025.4.3-r7 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.0","name":"kayenta-2026.0","label":"kayenta-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.0","purlType":"apk","versions":[{"text":"< 2026.0.2-r6","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2026.0.2-r6 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.1","name":"kayenta-2026.1","label":"kayenta-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.0","name":"kayenta-fips-2025.0","label":"kayenta-fips-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.1","name":"kayenta-fips-2025.1","label":"kayenta-fips-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.2","name":"kayenta-fips-2025.2","label":"kayenta-fips-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.4","name":"kayenta-fips-2025.4","label":"kayenta-fips-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.4","purlType":"apk","versions":[{"text":"< 2025.4.3-r7","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2025.4.3-r7 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.0","name":"kayenta-fips-2026.0","label":"kayenta-fips-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2026.0.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2026.0.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.1","name":"kayenta-fips-2026.1","label":"kayenta-fips-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop","name":"ontop","label":"ontop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop-fips","name":"ontop-fips","label":"ontop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-context","name":"org.springframework:spring-context","label":"spring-context","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-context","purlType":"maven","versions":[{"text":"≥ 6.1.0, < 6.1.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.0.24","noFixRecorded":false,"fixedIn":null},{"text":"≤ 5.3.40","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.1.0, < 6.1.14 | ≥ 6.0.0, ≤ 6.0.24 | ≤ 5.3.40","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"org.springframework","product":"spring-web","name":"org.springframework:spring-web","label":"spring-web","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-web","purlType":"maven","versions":[{"text":"≥ 6.1.0, < 6.1.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.0.24","noFixRecorded":false,"fixedIn":null},{"text":"≤ 5.3.40","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.1.0, < 6.1.14 | ≥ 6.0.0, ≤ 6.0.24 | ≤ 5.3.40","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"vmware","product":"spring","name":"Spring","label":"spring","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.3.x, < 5.3.41","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.x, < 6.0.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.x, < 6.1.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.3.x, < 5.3.41 | ≥ 6.0.x, < 6.0.25 | ≥ 6.1.x, < 6.1.14","eol":null,"hubHref":"/vendor/vmware/spring"},{"vendor":"vmware","product":"spring_framework","name":"Spring Framework","label":"spring_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.3.0, < 5.3.41","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.0.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0, < 6.1.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.3.0, < 5.3.41 | ≥ 6.0.0, < 6.0.25 | ≥ 6.1.0, < 6.1.14","eol":null,"hubHref":"/vendor/vmware/spring_framework"}],"affectedCount":43,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://spring.io/security/cve-2024-38820","label":"spring.io/security/cve-2024-38820","hostname":"spring.io","tags":["REPORT","WEB","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241129-0003/","label":"security.netapp.com/advisory/ntap-20241129-0003/","hostname":"security.netapp.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-38820","label":"ubuntu.com/security/CVE-2024-38820","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-38820","label":"www.cve.org/CVERecord?id=CVE-2024-38820","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-38820","label":"security-tracker.debian.org/tracker/CVE-2024-38820","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38820.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38820.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38820","label":"nvd.nist.gov/vuln/detail/CVE-2024-38820","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c","label":"github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework","label":"github.com/spring-projects/spring-framework","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2","label":"github.com/spring-projects/spring-framework/commits/v6.2.0-RC2","hostname":"github.com","tags":["WEB"]},{"url":"https://security.netapp.com/advisory/ntap-20241129-0003","label":"security.netapp.com/advisory/ntap-20241129-0003","hostname":"security.netapp.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-9GRP-6G38-66X6","CGA-C6CQ-22Q6-HC8W","CGA-XQP6-884P-65F9"]},"timeline":[{"kind":"published","date":"2024-10-18T05:39:05.275Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-29T12:04:41.387Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:36:42.863Z","stale":false,"partial":false}}