Junglewise Threat Intelligence

CVE-2009-1190: Spring Framework Inefficient Regular Expression Complexity

CVE-2009-1190 · Severity: info · Published 2022-05-02

Technologies: org.springframework:spring-core (Maven). Vendors: Maven.

Executive brief

Spring Framework Inefficient Regular Expression Complexity

Affected products

Maven org.springframework:spring-core

Related threats

Spring Security and Spring Framework may not recognize certain paths that should be protected
Moderate severity vulnerability that affects org.springframework:spring-core
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass