| CVE-2024-38810 |
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render…
|
6.5
Moyenne
|
20 août 2024 |
| CVE-2024-22234 |
In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to…
|
7.4
Élevée
|
20 févr. 2024 |
| CVE-2019-11272 |
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using…
|
Non notée
|
26 juin 2019 |
| CVE-2019-3795 |
Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure…
|
3.8
Faible
|
9 avr. 2019 |