Executive brief
Spring Security and Spring Framework may not recognize certain paths that should be protected
Affected products
- Maven org.springframework.security:spring-security-core
- Maven org.springframework:spring-core
Junglewise Threat Intelligence
CVE-2016-5007: Spring Security and Spring Framework may not recognize certain paths that should be protected
CVE-2016-5007 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: org.springframework.security:spring-security-core (Maven), org.springframework:spring-core (Maven). Vendors: Maven.
Related threats
- Spring Security authorization bypass for method security annotations on private methods
- Spring Security Vulnerable to Authorization Bypass via Security Annotations
- Spring Security Missing Authorization vulnerability
- Spring Framework Inefficient Regular Expression Complexity
- Insufficiently Protected Credentials and Improper Authentication in Spring Security