CVE-2024-38816 Vulnerability

[Pedro_Kravetz]

I want to know if any version of Alfresco corrects this vulnerability and, if not, how can I solve it?

[angelborroy · Accepted solution]

Alfresco is not affected by the vulnerability:

https://spring.io/security/cve-2024-38816

However, malicious requests are blocked and rejected when any of the following is true:

• the Spring Security HTTP Firewall is in use
• the application runs on Tomcat or Jetty