PT-2024-7362 · Atlassian+2 · Confluence Data Center/Server+7

Masato Anzai · Published 2024-10-17 · Updated 2026-04-24 · CVE-2024-38819

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Spring Framework versions prior to 5.3.41 Spring Framework versions prior to 6.0.25 Spring Framework versions prior to 6.1.14 Confluence Data Center and Server versions 3.0 through 9.1.0 Confluence Data Center and Server version 9.1 Bitbucket Data Center and Server versions 8.9.0 through 8.9.23 Bitbucket Data Center and Server versions 8.19.0 through 8.19.12 Bitbucket Data Center and Server version 8.9 Bitbucket Data Center and Server version 8.19 Bitbucket Data Center and Server version 9.4

Description: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running. Over 31,900 services are potentially affected by this vulnerability.

Recommendations: For Spring Framework versions prior to 5.3.41, update to version 5.3.41 or later. For Spring Framework versions prior to 6.0.25, update to version 6.0.25 or later. For Spring Framework versions prior to 6.1.14, update to version 6.1.14 or later. For Confluence Data Center and Server version 9.1, upgrade to a release greater than or equal to 9.1.1. For Bitbucket Data Center and Server version 8.9, upgrade to a release greater than or equal to 8.9.24. For Bitbucket Data Center and Server version 8.19, upgrade to a release greater than or equal to 8.19.13. For Bitbucket Data Center and Server version 9.4, upgrade to a release greater than or equal to 9.4.0. As a temporary workaround, consider restricting access to sensitive files and directories by implementing proper file permissions. Conduct a vulnerability scan to ensure no other instances are running vulnerable versions.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-08726

CVE-2024-38819

GHSA-G5VR-RGQM-VF78

Affected Products

Bitbucket

Bitbucket Data Center/Server

Confluence

Confluence Data Center/Server

Debian

Spring Framework

Webflux.Fn

Webmvc.Fn

References · 67

• 🔥 https://github.com/masa42/CVE-2024-38819-POC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-38819 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38819 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-38819 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08726 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-38819 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-38819 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-38819 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g5vr-rgqm-vf78 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38819 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-APP-MAVEN-CVE-2024-38819 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-38819 · Vendor Advisory
• https://github.com/spring-projects/spring-framework · Note
• https://github.com/spring-projects/spring-framework/issues/33689 · Note
• https://github.com/spring-projects/spring-framework/commit/3bfbe30a7814c9ea1556d40df9bd87ddb3ba372d · Note