CVE-2023-34034 PoC — VMware Spring Security 安全漏洞

Source

https://github.com/hotblac/cve-2023-34034

Associated Vulnerability

Title: VMware Spring Security 安全漏洞 (CVE-2023-34034)
Description:Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

Description

Demonstration of CVE-2023-24034 authorization bypass in Spring Security

Readme

# cve-2023-34034
Demonstration of CVE-2023-34034 authorization bypass in Spring Security.

See [CVE-2023-34034 Spring Security Authorization Bypass](https://www.dontpanicblog.co.uk/2023/12/09/cve-2023-34034-spring-security-authorization-bypass/) on Don't Panic!

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →