CVE-2022-31692
1 advisory.
Maven/org.springframework.security:spring-security-core CVE-2022-31692: critical 9.8
Spring Security authorization rules can be bypassed via forward or include dispatcher types
Action: Upgrade org.springframework.security:spring-security-core to 5.6.9 (5.6.x) or 5.7.5 (5.7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.7.0 | 5.7.5 | - |
| 5.6.0 | 5.6.9 | - |
Fixed versions
| 5.7.5 | 5.6.9 |
Sources
- osv: GHSA-mmmh-wcxm-2wr4
- https://nvd.nist.gov/vuln/detail/CVE-2022-31692
- https://github.com/spring-projects/spring-security
- https://security.netapp.com/advisory/ntap-20221215-0010
- https://tanzu.vmware.com/security/cve-2022-31692
CVE-2022-31692 · published · modified · JSON