org.springframework.security.oauth:spring-security-oauth2

3 results · Clear filters · Feed

• Medium 6.5
  CVE-2019-3778 Public exploit EPSS 17%

  Open Redirect in spring-security-oauth2

  Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

  Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 org.springframework.security.oauth:spring-security-oauth Maven
  Mar 7, 2019
• Critical 9.8
  CVE-2018-1260 Public exploit EPSS 11%

  Spring Security OAuth vulnerable to remote code execution (RCE)

  Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to t…

  Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven
  May 11, 2018
• High 8.8
  CVE-2016-4977 Public exploit Scanner template EPSS 80%

  Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views

  When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…

  Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven
  May 25, 2017