Skip to content
OpenAdvisories

Package · Maven

org.springframework.security.oauth:spring-security-oauth2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2016-4977 Public exploit Scanner template EPSS 80%

    Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views

    When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…

    Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven