{"version":"1.0","provider_name":"\u0645\u062f\u0648\u0646\u0629 Cyber DZ","provider_url":"https:\/\/cyberdz.dz\/blogs","author_name":"cyber","author_url":"https:\/\/cyberdz.dz\/blogs\/author\/cyber\/","title":"\u062a\u0646\u0628\u064a\u0647 Spring Framework CERTFR-2024-AVI-0776 - \u0645\u062f\u0648\u0646\u0629 Cyber DZ","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"B0DwjcICUR\"><a href=\"https:\/\/cyberdz.dz\/blogs\/%d8%aa%d9%86%d8%a8%d9%8a%d9%87-spring-framework-certfr-2024-avi-0776\/\">\u062a\u0646\u0628\u064a\u0647  Spring Framework CERTFR-2024-AVI-0776<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/cyberdz.dz\/blogs\/%d8%aa%d9%86%d8%a8%d9%8a%d9%87-spring-framework-certfr-2024-avi-0776\/embed\/#?secret=B0DwjcICUR\" width=\"600\" height=\"338\" title=\"&#8220;\u062a\u0646\u0628\u064a\u0647  Spring Framework CERTFR-2024-AVI-0776&#8221; &#8212; \u0645\u062f\u0648\u0646\u0629 Cyber DZ\" data-secret=\"B0DwjcICUR\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/cyberdz.dz\/blogs\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","thumbnail_url":"https:\/\/cyberdz.dz\/blogs\/wp-content\/uploads\/sites\/2\/2024\/09\/\u062a\u0646\u0628\u064a\u0647--Spring-Framework-CERTFR2024AVI0776.png","thumbnail_width":640,"thumbnail_height":360,"description":"\u00a0\u062a\u0646\u0628\u064a\u0647 Spring Framework CERTFR-2024-AVI-0776 &nbsp; \u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0627\u0644\u062a\u0646\u0628\u064a\u0647: &#8211; \u062c\u062f\u0648\u0644 \u0645\u0639\u0644\u0648\u0645\u0627\u062a &#8211; \u0627\u0644\u0645\u062e\u0627\u0637\u0631 &#8211; \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629 &#8211; \u0627\u0644\u0645\u0644\u062e\u0635 &#8211; \u0627\u0644\u062d\u0644\u0648\u0644 &#8211; \u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0645\u0639\u0644\u0648\u0645\u0627\u062a : \u0627\u0644\u0645\u0631\u062c\u0639 CERTFR-2024-AVI-0776 \u0627\u0644\u0639\u0646\u0648\u0627\u0646 Vuln\u00e9rabilit\u00e9 dans Spring Framework \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u0627\u0635\u062f\u0627\u0631 \u0627\u0644\u0623\u0648\u0644 13 septembre 2024 \u062a\u0627\u0631\u064a\u062e \u0623\u062e\u0631 \u062a\u062d\u062f\u064a\u062b 13 septembre 2024 \u0627\u0644\u0645\u0635\u0627\u062f\u0631 Bulletin de s\u00e9curit\u00e9 Spring cve-2024-38816 du 12 septembre 2024 \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a Aucune(s) \u0627\u0644\u0645\u062e\u0627\u0637\u0631: Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629: Framework versions 5.3.x ant\u00e9rieures \u00e0 5.3.40 Framework versions 6.0.x ant\u00e9rieures \u00e0 6.0.24 Framework versions 6.1.x ant\u00e9rieures \u00e0 6.1.13 \u0645\u0644\u062e\u0635 \u0627\u0644\u062a\u0646\u0628\u064a\u0647: Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Spring Framework. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es. \u0627\u0644\u062d\u0644\u0648\u0644 : Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l&#8217;\u00e9diteur pour l&#8217;obtention des correctifs (cf. section Documentation). \u0627\u0644\u0645\u0635\u0627\u062f\u0631: Bulletin de s\u00e9curit\u00e9 Spring cve-2024-38816 du 12 septembre 2024 https:\/\/spring.io\/security\/cve-2024-38816 R\u00e9f\u00e9rence CVE CVE-2024-38816 https:\/\/www.cve.org\/CVERecord?id=CVE-2024-38816 &nbsp;"}