Описание
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass.
You are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods
EPSS
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. You are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security ...
Spring Security Vulnerable to Authorization Bypass via Security Annotations
Уязвимость Java-фреймворка для обеспечения безопасности промышленных приложений Spring Security, позволяющая нарушителю повысить свои привилегии
EPSS
5.3 Medium
CVSS3