漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session or multiple sessions.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
VMware Spring Security 安全漏洞
Vulnerability Description
VMware Spring Security是美国威睿（VMware ）公司的一套为基于Spring的应用程序提供说明性安全保护的安全框架。 Spring Security 存在安全漏洞，攻击者可以发送多个请求来发起授权代码授予的授权请求，这有可能使用单个会话或多个会话耗尽系统资源。
CVSS Information
N/A
Vulnerability Type
N/A