Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-core@2.0.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-hh32-7344-cg2f
Aliases: CVE-2022-22978 |
Authorization bypass in Spring Security In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be … |
Vulnerable |
|
GHSA-3533-rvpc-6x56
Aliases: CVE-2012-5055 |
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x … | There are no reported fixed by versions. |
|
GHSA-f866-m9mv-2xr3
Aliases: CVE-2011-2894 |
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through … | There are no reported fixed by versions. |
|
GHSA-3295-h9qx-r82x
Aliases: CVE-2010-3700 |
Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security VMware SpringSource Spring Security 2.x … | There are no reported fixed by versions. |
|
GHSA-4644-hg35-55m9
Aliases: CVE-2011-2731 |
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security Race condition in the RunAsManager mechanism in VMware SpringSource … | There are no reported fixed by versions. |
|
GHSA-5xm9-rf63-wj7h
Aliases: CVE-2011-2732 |
Improper Control of Generation of Code in Spring Security CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring … | There are no reported fixed by versions. |
|
GHSA-v33x-prhc-gph5
Aliases: CVE-2019-11272 |
Insufficiently Protected Credentials and Improper Authentication in Spring Security Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions … | There are no reported fixed by versions. |
|
GHSA-q3v6-hm2v-pw99
Aliases: CVE-2024-38827 |
Spring Framework has Authorization Bypass for Case Sensitive Comparisons The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions … |
Vulnerable |
|
GHSA-f3jh-qvm4-mg39
Aliases: CVE-2024-22257 |
Erroneous authentication pass in Spring Security In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x … |
Vulnerable |
|
GHSA-2ppp-9496-p23q
Aliases: CVE-2020-5408 |
Insufficient Entropy in Spring Security Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, … | There are no reported fixed by versions. |
|
CVE-2012-5055
|
Exposure of Sensitive Information to an Unauthorized Actor This package does not check the password if the user is not … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-22976
Aliases: GHSA-wx54-3278-m5g4 |
Integer overflow in BCrypt class in Spring Security Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and … |
Vulnerable Vulnerable |
|
CVE-2021-22112
|
Privilege Escalation Spring Security can fail to save the `SecurityContext` if it is changed more than once in a single … |
Vulnerable |
|
GHSA-8crv-49fr-2h6j
Aliases: CVE-2016-5007 |
Spring Security and Spring Framework may not recognize certain paths that should be protected Both Spring Security 3.2.x, 4.0.x, 4.1.0 … | There are no reported fixed by versions. |
|
GHSA-wmv4-5w76-vp9g
Aliases: CVE-2014-3527 |
Authorization Bypass in Spring Security When using Spring Security's CAS Proxy ticket authentication a malicious CAS Service could trick another … | There are no reported fixed by versions. |
|
GHSA-v35c-49j6-q8hq
Aliases: CVE-2016-9879 |
Security Constraint Bypass in Spring Security Spring Security does not consider URL path parameters when processing security constraints. By adding … |
Vulnerable Vulnerable |
|
CVE-2016-5007
|
Improper Access Control Spring Security relies on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences … |
Vulnerable Vulnerable |