Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

Using "**" as a pattern in Spring Security configuration for WebFlux ...

Access Control Bypass in Spring Security

Уязвимость Java-фреймворка для обеспечения безопасности промышленных приложений Spring Security, связанная с использованием «**» в качестве шаблона в конфигурации Spring Security для WebFlux, позволяющая нарушителю обойти существующие ограничения безопасности