Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-34034

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3h6f-g5f3-gc4w

Access Control Bypass in Spring Security Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

gitlab/maven/org.springframework.security/spring-security-config/CVE-2023-34034

Access Control Bypass in Spring Security Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

gitlab/maven/org.springframework.security/spring-security-core/CVE-2023-34034

Improper Handling of Inconsistent Structural Elements Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.