CVE-2024-38828

Description

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Affected Platforms

Weakness Type

CWE-400

References

• https://spring.io/security/cve-2024-38828
• https://security.netapp.com/advisory/ntap-20250509-0009/