Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation

Potential Security Misconfiguration when Using withIssuerLocation

Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector…

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security…

Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

Open Redirect When Using CookieRequestCache

Spring Security Authorization Server Open Redirect via request_uri

Timing Attack via Non-Constant-Time Comparison of Sensitive Values

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file…

Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting

Spring Security InetAddressMatchers Incomplete Internal Network Classification

SAML Payloads Decrypted Without Valid Signature

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses…

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when using…

Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider…

Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions