ID:10782 - Exploit for Improper Authorization in Spring Security - CVE-2024-38821

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authorization.

The vulnerability exists due to improper implementation of authorization checks when accessing static resources in WebFlux application. A remote non-authenticated attacker can bypass authorization process and gain unauthorized access to the application.

Remediation