Aller au contenu
en Se connecter
Non notée

CVE-2021-22119 Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are…

Description

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session or multiple sessions.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring Security Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Spring Security

Les 10 CVE de Spring Security →
CVE-2024-22257 In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions… 8.2 Élevée CVE-2023-34042 The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were … 4.1 Moyenne CVE-2023-34034 Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between… 9.1 Critique CVE-2023-34035 Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to… 7.3 Élevée
Suivre cette CVE