CVE-2024-22258
1 advisory.
Maven/org.springframework.security:spring-security-oauth2-authorization-server CVE-2024-22258: medium 6.1
Improper Authentication in Spring Authorization Server
Action: Upgrade org.springframework.security:spring-security-oauth2-authorization-server to 1.1.6 (1.1.x) or 1.2.3 (1.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.6 | - |
| 1.2.0 | 1.2.3 | - |
Fixed versions
| 1.1.6 | 1.2.3 |
Sources
- osv: GHSA-x637-x8p3-5p22
- https://nvd.nist.gov/vuln/detail/CVE-2024-22258
- https://github.com/spring-projects/spring-authorization-server/commit/a7035d22bd2de6c24e7125623d38fb83d8f659a9
- https://spring.io/security/cve-2024-22258
CVE-2024-22258 · published · modified · JSON