Package · Maven

org.springframework.security:spring-security-config

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.1

CVE-2023-34034 Public exploit

Access Control Bypass in Spring Security

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

org.springframework.security:spring-security-config Maven

Jul 19, 2023