Security
فارسی
All products

Red Hat Process Automation 7/spring-security

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Erroneous authentication pass in Spring SecurityCVE-2024-22257 · GHSA-F3JH-QVM4-MG39 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat High Fix reported
Broken Access Control in Spring Security With Direct Use of isFullyAuthenticatedCVE-2024-22234 · GHSA-W3W6-26F2-P474 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat High Fix reported
Access Control Bypass in Spring SecurityCVE-2023-34034 · GHSA-3H6F-G5F3-GC4W org.springframework.security:spring-security-configRed Hat JBoss Fuse 6/spring-security MavenRed Hat Critical Fix reported
Spring Security authorization rules can be bypassed via forward or include dispatcher typesCVE-2022-31692 · GHSA-MMMH-WCXM-2WR4 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Critical Fix reported
Spring Security logout not clearing security contextCVE-2023-20862 · GHSA-X873-6RGC-94JC org.springframework.security:spring-security-coreRed Hat Decision Manager 7/spring-security MavenRed Hat Medium Fix reported