Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9jd9-sy72-d3bk
Vulnerability ID VCID-9jd9-sy72-d3bk
Aliases CVE-2022-31690
GHSA-32vj-v39g-jh23
Summary Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-269 Improper Privilege Management
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 8.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31690.json
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2022-31690
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2022-31690
epss 0.00313 https://api.first.org/data/v1/epss?cve=CVE-2022-31690
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-32vj-v39g-jh23
cvssv3.1 8.1 https://github.com/spring-projects/spring-security-samples/blob/4638e1e428ee2ddab234199eb3b67b9c94dfa08b/servlet/spring-boot/java/oauth2/webclient/src/main/java/example/SecurityConfiguration.java#L48
generic_textual HIGH https://github.com/spring-projects/spring-security-samples/blob/4638e1e428ee2ddab234199eb3b67b9c94dfa08b/servlet/spring-boot/java/oauth2/webclient/src/main/java/example/SecurityConfiguration.java#L48
cvssv3.1 8.1 https://nvd.nist.gov/vuln/detail/CVE-2022-31690
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-31690
cvssv3.1 8.1 https://security.netapp.com/advisory/ntap-20221215-0010
generic_textual HIGH https://security.netapp.com/advisory/ntap-20221215-0010
cvssv3.1 8.1 https://security.netapp.com/advisory/ntap-20221215-0010/
ssvc Track https://security.netapp.com/advisory/ntap-20221215-0010/
cvssv3.1 8.1 https://tanzu.vmware.com/security/cve-2022-31690
generic_textual HIGH https://tanzu.vmware.com/security/cve-2022-31690
ssvc Track https://tanzu.vmware.com/security/cve-2022-31690
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31690.json
https://api.first.org/data/v1/epss?cve=CVE-2022-31690
https://github.com/spring-projects/spring-security-samples/blob/4638e1e428ee2ddab234199eb3b67b9c94dfa08b/servlet/spring-boot/java/oauth2/webclient/src/main/java/example/SecurityConfiguration.java#L48
https://security.netapp.com/advisory/ntap-20221215-0010
2162200 https://bugzilla.redhat.com/show_bug.cgi?id=2162200
cve-2022-31690 https://tanzu.vmware.com/security/cve-2022-31690
CVE-2022-31690 https://nvd.nist.gov/vuln/detail/CVE-2022-31690
GHSA-32vj-v39g-jh23 https://github.com/advisories/GHSA-32vj-v39g-jh23
ntap-20221215-0010 https://security.netapp.com/advisory/ntap-20221215-0010/
RHSA-2023:1285 https://access.redhat.com/errata/RHSA-2023:1285
RHSA-2023:1286 https://access.redhat.com/errata/RHSA-2023:1286
RHSA-2023:1655 https://access.redhat.com/errata/RHSA-2023:1655
RHSA-2023:2041 https://access.redhat.com/errata/RHSA-2023:2041
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-31690.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/spring-projects/spring-security-samples/blob/4638e1e428ee2ddab234199eb3b67b9c94dfa08b/servlet/spring-boot/java/oauth2/webclient/src/main/java/example/SecurityConfiguration.java#L48
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-31690
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://security.netapp.com/advisory/ntap-20221215-0010
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://security.netapp.com/advisory/ntap-20221215-0010/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T18:42:47Z/ Found at https://security.netapp.com/advisory/ntap-20221215-0010/
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://tanzu.vmware.com/security/cve-2022-31690
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T18:42:47Z/ Found at https://tanzu.vmware.com/security/cve-2022-31690
Exploit Prediction Scoring System (EPSS)
Percentile 0.54882
EPSS Score 0.00313
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:38:16.922598+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/31xxx/CVE-2022-31690.json 38.6.0