Skip to content

Vulnerabilities of Spring Spring Security

Is your version affected?

CVE Summary Score Published
CVE-2024-38810 Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render… 6.5 Medium Aug 20, 2024
CVE-2024-22234 In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to… 7.4 High Feb 20, 2024
CVE-2019-11272 Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using… Not rated Jun 26, 2019
CVE-2019-3795 Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure… 3.8 Low Apr 9, 2019

Other Spring products