| CVE-2024-38810 |
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render…
|
6.5
Medium
|
Aug 20, 2024 |
| CVE-2024-22234 |
In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to…
|
7.4
High
|
Feb 20, 2024 |
| CVE-2019-11272 |
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using…
|
Not rated
|
Jun 26, 2019 |
| CVE-2019-3795 |
Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure…
|
3.8
Low
|
Apr 9, 2019 |