Aller au contenu
en Se connecter
4.1 Moyenne

CVE-2023-34042 The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were …

Description

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical Resource” and could result in an exploit. Users should update to the latest version of Spring Security to mitigate any future exploits found around this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring Security Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Spring Security

Les 10 CVE de Spring Security →
CVE-2024-22257 In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions… 8.2 Élevée CVE-2023-34034 Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between… 9.1 Critique CVE-2023-34035 Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to… 7.3 Élevée CVE-2023-20862 In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the… 6.3 Moyenne
Suivre cette CVE