Vulnerabilidades de Spring Security

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Spring Security: 1 registro(s), com severidade, exploração e correções.

Spring Authorization Server 1

Somente exploradas (KEV) →

CVE-2026-22752 Crítica · 9.6 CWE-287 16/07/2026

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.