Archive

19 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /19 June 2022 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2022-22978 Public exploit EPSS 12%

Authorization bypass in Spring Security

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression …

libspring-java org.springframework.security:spring-security-core org.springframework.security:spring-security-web Ubuntu Maven

May 19, 2022