Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-core@3.0.0
purl pkg:maven/org.springframework.security/spring-security-core@3.0.0
Tags Ghost
Next non-vulnerable version 6.2.8
Latest non-vulnerable version 7.0.5
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-3533-rvpc-6x56
Aliases:
CVE-2012-5055
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x … There are no reported fixed by versions.
GHSA-f866-m9mv-2xr3
Aliases:
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through … There are no reported fixed by versions.
GHSA-3295-h9qx-r82x
Aliases:
CVE-2010-3700
Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security VMware SpringSource Spring Security 2.x … There are no reported fixed by versions.
GHSA-4644-hg35-55m9
Aliases:
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security Race condition in the RunAsManager mechanism in VMware SpringSource … There are no reported fixed by versions.
GHSA-5xm9-rf63-wj7h
Aliases:
CVE-2011-2732
Improper Control of Generation of Code in Spring Security CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring … There are no reported fixed by versions.
This package is not known to fix any advisories.