org.springframework.security:spring-security-core vulnerabilities (Maven)
31 vulnerabilities.
-
org.springframework.security:spring-security-coreMaven User Attribute Enumeration when Using DaoAuthenticationProvider 3.7 Low -
org.springframework.security:spring-security-coreMaven Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions 4.8 Medium -
org.springframework.security:spring-security-coreMaven Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigation 5.3 Medium -
org.springframework.security:spring-security-coreMaven CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types 7.5 High -
org.springframework.security:spring-security-coreMaven CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods 9.1 Critical -
org.springframework.security:spring-security-coreMaven Spring Security Vulnerable to Authorization Bypass via Security Annotations 5.3 Medium -
org.springframework.security:spring-security-coreMaven Spring Security Authorization Bypass for Case Sensitive Comparisons 4.8 Medium -
org.springframework.security:spring-security-coreMaven Missing Authorization When Using @AuthorizeReturnObject 6.5 Medium -
org.springframework.security:spring-security-coreMaven Erroneous authentication pass in Spring Security 8.2 High -
org.springframework.security:spring-security-coreMaven CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated 7.4 High -
org.springframework.security:spring-security-coreMaven Spring Security logout not clearing security context 6.3 Medium -
org.springframework.security:spring-security-coreMaven Spring Security authorization rules can be bypassed via forward or include dispatcher types 9.8 Critical -
org.springframework.security:spring-security-coreMaven Integer overflow in BCrypt class in Spring Security 5.3 Medium -
org.springframework.security:spring-security-coreMaven Authorization bypass in Spring Security 9.8 Critical -
org.springframework.security:spring-security-coreMaven Resource Exhaustion in Spring Security 7.5 High -
org.springframework.security:spring-security-coreMaven Dictionary attack with Spring Security queryable text encryptor 6.5 Medium -
org.springframework.security:spring-security-coreMaven Signature Wrapping Vulnerability with spring-security-saml2-service-provider 8.8 High -
org.springframework.security:spring-security-coreMaven PlaintextPasswordEncoder authenticates encoded passwords that are null 7.3 High -
org.springframework.security:spring-security-coreMaven Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security 3.8 Low -
org.springframework.security:spring-security-coreMaven Authorization Bypass During JWT Issuer Validation with spring-security 3.3 Low -
org.springframework.security:spring-security-coreMaven Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core 5.3 Medium -
org.springframework.security:spring-security-coreMaven Deserialization of Untrusted Data in Spring Security 8.1 High -
org.springframework.security:spring-security-coreMaven Spring Security and Spring Framework may not recognize certain paths that should be protected 7.5 High -
org.springframework.security:spring-security-coreMaven Authorization Bypass in Spring Security 9.8 Critical -
org.springframework.security:spring-security-coreMaven Improper Authentication in Spring Security 7.3 High -
org.springframework.security:spring-security-coreMaven Security Constraint Bypass in Spring Security 7.5 High -
org.springframework.security:spring-security-coreMaven Exposure of Sensitive Information to an Unauthorized Actor in Spring Security 5.0 Medium -
org.springframework.security:spring-security-coreMaven Improper Control of Generation of Code in Spring Security 4.3 Medium -
org.springframework.security:spring-security-coreMaven Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security 5.1 Medium -
org.springframework.security:spring-security-coreMaven Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data 6.8 Medium -
org.springframework.security:spring-security-coreMaven Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security 5.0 Medium