Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-293q-567p-wmwq
  • Maven/org.springframework.security:spring-security-web
 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates 10 Jun
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-x2r2-rvhq-2mqv
  • Maven/org.springframework.security:spring-security-web
 Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache 10 Jun
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-2jrg-rf5x-568g
  • Maven/org.springframework.security:spring-security-web
 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates 22 Apr
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-mf92-479x-3373
  • Maven/org.springframework.security:spring-security-web
 Spring Security HTTP Headers Are not Written Under Some Conditions 20 Mar
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-c4q5-6c82-3qpw
  • Maven/org.springframework.security:spring-security-web
 Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications 28 Oct 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-hh32-7344-cg2f
  • Maven/org.springframework.security:spring-security-core
  • Maven/org.springframework.security:spring-security-web
 Authorization bypass in Spring Security 20 May 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-gq28-h5vg-8prx
  • Maven/org.springframework.security:spring-security-bom
  • Maven/org.springframework.security:spring-security-web
 Privilege escalation in spring security 10 May 2021
  • Fix available
  • Severity - 8.8 (High)