Skip to content
OpenAdvisories

Archive

31 October 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31692 Public exploit

    Spring Security authorization rules can be bypassed via forward or include dispatcher types

    Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

  • Critical 9.8
    CVE-2022-40471 Public exploit EPSS 28%

    Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via …