VDB
WID-SEC-W-2024-1916
WID-SEC-W-2024-1916
PUBLISHED
Spring Boot ist ein Framework zur Entwicklung von Java Anwendungen. Spring Boot basiert auf dem Spring Framework.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware Tanzu Spring Boot <2.7.22 | ||
| VMware Tanzu Spring Boot 3.3.3 | ||
| VMware Tanzu Spring Boot <3.0.17 | ||
| VMware Tanzu Spring Boot <3.1.13 | ||
| VMware Tanzu Spring Boot <3.3.3 | ||
| NetApp ActiveIQ Unified Manager | ||
| VMware Tanzu Spring Boot <3.2.9 | ||
| VMware Tanzu Spring Boot 3.2.9 | ||
| VMware Tanzu Spring Boot 3.1.13 | ||
| VMware Tanzu Spring Boot 3.0.17 | ||
| VMware Tanzu Spring Boot 2.7.22 |
Exploit Intelligence
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1916.json (circl)
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1916 (circl)
- https://spring.io/blog/2024/08/23/spring-boot-releases-fix-for-cve-2024-38807 (circl)
- https://spring.io/security/cve-2024-38807 (circl)
- https://security.netapp.com/advisory/ntap-20250117-0006/ (circl)
Timeline
- Aug 22, 2024 CVE Published
- Jan 19, 2025 CVE Updated
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1916.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1916 advisory
- https://spring.io/blog/2024/08/23/spring-boot-releases-fix-for-cve-2024-38807 url
- https://spring.io/security/cve-2024-38807 url
- https://security.netapp.com/advisory/ntap-20250117-0006/ url