Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2024-22257
In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.
| Software | From | Fixed in |
|---|---|---|
org.springframework.security / spring-security-core
|
- | 5.7.12 |
|
org.springframework.security / spring-security-core
|
5.8.0 | 5.8.11 |
|
org.springframework.security / spring-security-core
|
6.0.0 | 6.1.8 |
|
org.springframework.security / spring-security-core
|
6.2.0 | 6.2.3 |