Vendor
Spring
247 known vulnerabilities.
Products
Spring Framework 45
Spring Security 29
Spring AI 18
Spring Integration 16
Spring Boot 15
Spring Cloud Config 10
Spring for GraphQL 9
Spring AMQP 8
Spring Cloud Function 8
Spring Web Services 8
Reactor Netty 7
Spring for Apache Kafka 6
Spring Data REST 6
Spring Tools for Eclipse 6
Spring Cloud Stream 5
Spring Batch 4
Spring 4
Micrometer 4
Spring Data Commons 4
Spring HATEOAS 3
Spring Tools for VSCode / Cursor / Theia 2
Spring LDAP 2
Reactor Core 2
Spring Cloud Gateway 2
Spring Data JPA 2
Spring Data MongoDB 2
Spring Web Flow 2
Spring Authorization Server 2
Spring Security OAuth 2
Spring gRPC 2
Micrometer Tracing 1
Cloud Gateway 1
Spring Foundation 1
Spring Cloud Contract 1
Spring Cloud Commons 1
Spring Retry 1
Spring Cloud 1
Spring Statemachine 1
Spring REST Docs 1
Spring Cloud Data Flow 1
81 results · Clear filters · Feed
-
High 7.3
PlaintextPasswordEncoder authenticates encoded passwords that are null
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a nu…