maven

org.springframework.security:spring-security-core

31 Total advisories

31 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.springframework.security:spring-security-core is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.springframework.security:spring-security-core

Vulnerabilities

Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

Spring Security annotation detection mechanism has authorization bypass

Spring Framework has Authorization Bypass for Case Sensitive Comparisons

Erroneous authentication pass in Spring Security

Spring Security Vulnerable to Authorization Bypass via Security Annotations

Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide

Spring Security authorization bypass for method security annotations on private methods

Spring Security Missing Authorization vulnerability

Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Exposure of Sensitive Information to an Unauthorized Actor in Spring Security

Improper Control of Generation of Code in Spring Security

Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Spring Security and Spring Framework may not recognize certain paths that should be protected

Security Constraint Bypass in Spring Security

Authorization bypass in Spring Security

Integer overflow in BCrypt class in Spring Security

Authorization Bypass in Spring Security

Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core

Spring Security vulnerable to Authorization Bypass

Deserialization of Untrusted Data in Spring Security

Spring Security authorization rules can be bypassed via forward or include dispatcher types

Spring Security logout not clearing security context

Resource Exhaustion in Spring Security

Insufficient Entropy in Spring Security

Signature wrapping vulnerability in Spring Security

Spring Security uses insufficiently random values

Insufficiently Protected Credentials and Improper Authentication in Spring Security

Improper Authentication in Spring Security

Browse more Maven advisories

Start Securing