Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Spring Security — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in Spring Security, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities for the open-source Spring Security library, focusing on authentication and access control weaknesses in Java applications. It collects reported issues, primarily related to authorization bypasses and session management flaws, covering disclosures from 2023 through 2024. Here you can track the vendor's advisory history, analyze the impact of specific weakness classes, and review the product's past vulnerability timeline to assess risk and plan remediation strategies.

Vendor: Pivotal

CVE ID Title CVSS Severity Published
CVE-2024-22234 CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated 7.4 High 2024-02-20
CVE-2023-34042 VMware Spring Security 安全漏洞 4.1 Medium 2024-02-05
CVE-2023-34034 VMware Spring Security 安全漏洞 9.1 Critical 2023-07-19
CVE-2023-34035 Spring Security 安全漏洞 7.3 High 2023-07-18
CVE-2023-20862 Spring Framework 安全漏洞 9.4 - 2023-04-19
CVE-2022-31690 VMware Spring Security 安全漏洞 8.1 - 2022-10-31
CVE-2022-22976 Spring Framework 输入验证错误漏洞 CWE-190 5.3 - 2022-05-19
CVE-2022-22978 VMware Spring Security 授权问题漏洞 CWE-863 9.8 - 2022-05-19
CVE-2021-22119 VMware Spring Security 安全漏洞 CWE-400 7.5 - 2021-06-29
CVE-2021-22112 Vmware VMware Spring Security 权限许可和访问控制问题漏洞 8.8 - 2021-02-23
CVE-2020-5408 Dictionary attack with Spring Security queryable text encryptor CWE-329 4.3 - 2020-05-14
CVE-2020-5407 Signature Wrapping Vulnerability with spring-security-saml2-service-provider CWE-347 8.1 - 2020-05-13
CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null CWE-287 7.7 - 2019-06-26
CVE-2019-3795 Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security CWE-330 6.5 - 2019-04-09
CVE-2018-15801 Authorization Bypass During JWT Issuer Validation with spring-security 7.4 - 2018-12-19
CVE-2014-0097 Pivotal Spring Security 安全漏洞 8.6 - 2017-05-25
CVE-2016-5007 Pivotal Spring Security和Spring Framework 安全漏洞 8.2 - 2017-05-25
CVE-2014-3527 Pivotal Spring Security 安全漏洞 9.8 - 2017-05-25

All 48 known CVE vulnerabilities affecting Spring Security with full Chinese analysis, references, and POCs where available.