org.springframework.security:spring-security-cas vulnerabilities (TuxCare)
9 vulnerabilities.
-
org.springframework.security:spring-security-casTuxCare Unauthorized User Impersonation when Using X.509 Client Certificates 6.8 Medium -
org.springframework.security:spring-security-casTuxCare User Attribute Enumeration when Using DaoAuthenticationProvider 3.7 Low -
org.springframework.security:spring-security-casTuxCare Under Some Conditions Spring Security HTTP Headers Are not Written 9.1 Critical -
org.springframework.security:spring-security-casTuxCare CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length 7.4 High -
org.springframework.security:spring-security-casTuxCare Spring Security Authorization Bypass for Case Sensitive Comparisons 4.8 Medium -
org.springframework.security:spring-security-casTuxCare Erroneous authentication pass in Spring Security 8.2 High -
org.springframework.security:spring-security-casTuxCare Authorization bypass in Spring Security 9.8 Critical -
org.springframework.security:spring-security-casTuxCare Privilege escalation in spring security 8.8 High -
org.springframework.security:spring-security-casTuxCare PlaintextPasswordEncoder authenticates encoded passwords that are null 7.3 High