Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Spring Boot Improper Verification of Cryptographic Signature Vulnerability - CVE-2024-38807 - Vulnerability Database
Spring Boot

Spring Boot Improper Verification of Cryptographic Signature Vulnerability - CVE-2024-38807

Medium
Reference: CVE-2024-38807
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-38807
Title: Spring Boot Improper Verification of Cryptographic Signature Vulnerability
Overview:

Applications that use spring-boot-loaderor spring-boot-loader-classicand contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has in fact been signed by another.