SOI - CVE-2024-22243 Vulnerability

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

Does SOI have vulnerability CVE-2024-22243

https://nvd.nist.gov/vuln/detail/CVE-2024-22243

https://spring.io/security/cve-2024-22243

 

Environment

SOI 4.2 CU5

Resolution

Dev verified our 4.2 CU5 code base, and we are not using the method in question "UriComponentsBuilder" which seems to be the prerequisite for this vulnerability (CVE-2024-22243: Spring Framework URL Parsing with Host Validation).

So SOI is does not have this Vulnerability.