Описание
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libspring-security-2.0-java | removed | package |
EPSS
Процентиль: 38%
0.00458
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 2 лет назад
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.
CVSS3: 6.5
redhat
около 2 лет назад
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.
CVSS3: 6.5
nvd
около 2 лет назад
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.
CVSS3: 6.5
github
около 2 лет назад
Spring Security Missing Authorization vulnerability
EPSS
Процентиль: 38%
0.00458
Низкий