CVE-2024-38821: A Spring WebFlux security bypass vulnerability allows unauthorized access to static resources. This vulnerability arises when Spring Security authorization rules on static resources are circumvented under specific conditions in WebFlux applications. Spring's static resources support must be in use and a non-permitAll authorization rule applied for the vulnerability to be exploited. With a SOCRadar Vulnerability Risk Score (SVRS) of 79, this vulnerability is approaching critical severity and requires prompt investigation. Although not exceeding the critical threshold of 80, its proximity emphasizes the urgency. This vulnerability poses a significant risk because active exploits are available, making it attractive to threat actors. Immediate patching is advised to mitigate potential unauthorized access to sensitive resources.