-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.springframework.ldap:spring-ldap-core | maven | >= 3.0.0, < 3.2.8 | 3.2.8 |
| org.springframework.ldap:spring-ldap-core | maven | < 2.4.4 | 2.4.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from locale-dependent case conversions via String.toLowerCase()/toUpperCase(). Spring LDAP's core components handling attribute processing (LdapUtils) and query filtering (WhitespaceWildcardsFilter) are logical candidates. These areas likely perform case-sensitive operations for LDAP attribute comparisons or query sanitization without explicit locale control. The confidence is medium due to the absence of direct code references, but aligns with the described vulnerability pattern and Spring LDAP's architecture.
JavaJava