Vulnerability

CVE-2024-38829

 Report advisory or correction

CVSS Score 2.3 low

CVSS Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-178

References

https://github.com/spring-projects/spring-ldap/issues/964
https://github.com/spring-projects/spring-ldap/issues/965
https://spring.io/security/cve-2024-38829
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38829

[CVE-2024-38829] CWE-178: Improper Handling of Case Sensitivity

Description

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in unintended columns from being queried Related to CVE-2024-38820 https://spring.io/security/cve-2024-38820