### [CVE-2024-38827](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38827) ![](https://img.shields.io/static/v1?label=Product&message=Spring%20Security&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=5.7.0%20-%205.7.13%2C%205.8.0%20-%205.8.15%2C%206.0.0%20-%206.0.13%2C%206.1.0%20-%206.1.11%2C%206.2.0%20-%206.2.7%2C%206.3.0%20-%206.3.4%2C%20Older%20unsupported%20versions%20are%20also%20affected%20&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639&color=brightgreen) ### Description The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly. ### POC #### Reference No PoCs from references. #### Github - https://github.com/zhanpengliu-tencent/medium-cve