org.springframework.security:spring-security-oauth2-client

2 results · Feed

• High 8.1
  CVE-2022-31690

  spring-security-oauth2-client vulnerable to Privilege Escalation

  Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the br…

  libspring-java org.springframework.security:spring-security-oauth2-client Ubuntu Maven
  Oct 31, 2022
• High 7.5
  CVE-2021-22119 Public exploit

  Resource Exhaustion in Spring Security

  Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux app…

  org.springframework.security:spring-security-core org.springframework.security:spring-security-oauth2-client Maven
  Jun 29, 2021