~ / search / GHSA-cxrj-66c5-9fmh

GHSA-cxrj-66c5-9fmh

Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass

Source: GitHub Advisory Database (reviewed) High CVE-2018-1258

Packages

EcosystemPackageAffectedFixed in
Maven org.springframework:spring-core >= 5.0.5.RELEASE, < 5.0.6.RELEASE 5.0.6.RELEASE

Details

As written in the advisory (Markdown source, shown as plain text).

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

References

External links from the advisory. They lead to third-party sites.