cve/2024/CVE-2024-38827.md

### [CVE-2024-38827](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38827)
![](https://img.shields.io/static/v1?label=Product&message=Spring%20Security&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.7.0%20-%205.7.13%2C%205.8.0%20-%205.8.15%2C%206.0.0%20-%206.0.13%2C%206.1.0%20-%206.1.11%2C%206.2.0%20-%206.2.7%2C%206.3.0%20-%206.3.4%2C%20Older%20unsupported%20versions%20are%20also%20affected%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639&color=brightgreen)

### Description

The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/zhanpengliu-tencent/medium-cve