Package · Maven

org.springframework.security.oauth:spring-security-oauth2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-1260 Public exploit EPSS 11%

Spring Security OAuth vulnerable to remote code execution (RCE)

Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to t…

Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven

May 11, 2018