Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-oauth2-jose@5.1.1.RELEASE |
| Next non-vulnerable version | 5.1.2.RELEASE |
| Latest non-vulnerable version | 7.0.5 |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-15801
|
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-27xw-p8v6-9jjr
Aliases: CVE-2018-15801 |
Spring Security vulnerable to Authorization Bypass Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT … | There are no reported fixed by versions. |
|
CVE-2018-15801
|
Insufficient Verification of Data Authenticity Spring Security contains an authorization bypass vulnerability during JWT issuer validation. In order to be … |
Not vulnerable Not vulnerable |