org.springframework.security:spring-security-core vulnerabilities (Root)
10 vulnerabilities.
-
org.springframework.security:spring-security-coreRoot Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions 4.8 Medium -
org.springframework.security:spring-security-coreRoot CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types 7.5 High -
org.springframework.security:spring-security-coreRoot CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods 9.1 Critical -
org.springframework.security:spring-security-coreRoot Spring Security Authorization Bypass for Case Sensitive Comparisons 4.8 Medium -
org.springframework.security:spring-security-coreRoot Erroneous authentication pass in Spring Security 8.2 High -
org.springframework.security:spring-security-coreRoot CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated 7.4 High -
org.springframework.security:spring-security-coreRoot Spring Security logout not clearing security context 6.3 Medium -
org.springframework.security:spring-security-coreRoot Spring Security authorization rules can be bypassed via forward or include dispatcher types 9.8 Critical -
org.springframework.security:spring-security-coreRoot Authorization bypass in Spring Security 9.8 Critical -
org.springframework.security:spring-security-coreRoot Privilege escalation in spring security 8.8 High