Skip to content
OpenAdvisories

Package · Maven

org.springframework.security:spring-security-config

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.1
    CVE-2023-34042

    Spring Security's spring-security.xsd file is world writable

    The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorre…

    org.springframework.security:spring-security-config Maven