Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-22754

Опубликовано: 22 апр. 2026
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from 7.0.0 through 7.0.4.

A flaw was found in Spring Security. When an application uses <sec:intercept-url> to define authorization rules, the servlet path may not be correctly included in the path matcher. This oversight can lead to an authorization bypass, allowing a remote attacker to access protected resources without proper authentication or authorization.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
OpenShift Developer Tools and ServicesjenkinsNot affected
OpenShift Developer Tools and Servicesocp-tools-4/jenkins-rhel8Not affected
OpenShift Developer Tools and Servicesocp-tools-4/jenkins-rhel9Not affected
Red Hat build of Apache Camel for Spring Boot 4spring-security-coreNot affected
Red Hat build of Apache Camel - HawtIO 4spring-security-coreNot affected
Red Hat build of Quarkusquarkus-spring-security-core-apiNot affected
Red Hat Data Grid 8spring-security-coreNot affected
Red Hat Fuse 7org.apache.servicemix.bundles.spring-security-coreNot affected
Red Hat Fuse 7spring-security-coreNot affected
Red Hat JBoss Enterprise Application Platform 7spring-security-coreNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-551
https://bugzilla.redhat.com/show_bug.cgi?id=2460489Spring Security: Spring Security: Authorization bypass due to incorrect servlet path matching

EPSS

Процентиль: 19%
0.00266
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from 7.0.0 through 7.0.4.

CVSS3: 7.5
nvd
4 месяца назад

Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from 7.0.0 through 7.0.4.

CVSS3: 7.5
debian
4 месяца назад

Vulnerability in Spring Spring Security. If an application uses<sec:in ...

CVSS3: 7.5
github
4 месяца назад

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules

EPSS

Процентиль: 19%
0.00266
Низкий

7.5 High

CVSS3