Package · Maven

org.springframework.security:spring-security-core

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2022-31692 Public exploit

Spring Security authorization rules can be bypassed via forward or include dispatcher types

Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

libspring-java org.springframework.security:spring-security-core Ubuntu Maven

Oct 31, 2022
Critical 9.8

CVE-2022-22978 Public exploit EPSS 12%

Authorization bypass in Spring Security

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression …

libspring-java org.springframework.security:spring-security-core org.springframework.security:spring-security-web Ubuntu Maven

May 19, 2022