Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-cas@4.0.3.RELEASE
purl pkg:maven/org.springframework.security/spring-security-cas@4.0.3.RELEASE
Next non-vulnerable version 4.2.13.RELEASE
Latest non-vulnerable version 5.3.4.RELEASE
Risk score 3.3
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-v33x-prhc-gph5
Aliases:
CVE-2019-11272
Insufficiently Protected Credentials and Improper Authentication in Spring Security Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions …
4.2.13.RELEASE
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2014-3527
When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another …