搜索结果
关于「spring_security」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-59277 | Spring Security InetAddressMatchers 内部网络分类不完整 (CVE-2026-59277) | 2026-08-28 | ||
| AVD-2026-59276 | 通过敏感值的非恒定时间比较进行定时攻击 (CVE-2026-59276) | 2026-08-28 | ||
| AVD-2026-59354 | Spring Security客户端注册漏洞(CVE-2026-59354) | 2026-08-27 | ||
| AVD-2026-59270 | Spring Security嵌入式LDAP未授权访问漏洞(CVE-2026-59270) | 2026-08-27 | ||
| AVD-2026-47877 | Spring Security Authorization Server 默认同意页跨站脚本漏洞(CVE-2026-47877) | 2026-08-27 | ||
| AVD-2026-47842 | Spring Security AesBytesEncryptor 中的确定性 AES/CBC 加密允许密文关联 (CVE-2026-47842) | 2026-08-27 | ||
| AVD-2026-47841 | 通过会话序列化绕过 WebAuthn 用户验证 (CVE-2026-47841) | 2026-08-27 | ||
| AVD-2026-47838 | Spring Security X.509用户伪装漏洞(CVE-2026-47838) | 2026-06-10 | ||
| AVD-2026-41706 | Spring Security CookieRequestCache 开放重定向漏洞(CVE-2026-41706) | 2026-06-10 | ||
| AVD-2026-41008 | Spring Security Authorization Server 开放重定向漏洞(CVE-2026-41008) | 2026-06-10 | ||
| AVD-2026-40993 | Spring Security SAML2 反序列化漏洞(CVE-2026-40993) | 2026-06-10 | ||
| AVD-2026-41003 | Spring Security XSS 漏洞(CVE-2026-41003) | 2026-06-10 | ||
| AVD-2026-41694 | Spring Security SAML签名验证绕过漏洞(CVE-2026-41694) | 2026-06-10 | ||
| AVD-2026-40988 | Spring Security SAML2 DEFLATE 膨胀 DoS 漏洞(CVE-2026-40988) | 2026-06-10 | ||
| AVD-2026-22754 | ervlet 路径未正确包含在 XML 授权规则的路径匹配中 (CVE-2026-22754) | 2026-04-22 | ||
| AVD-2026-22753 | Servlet 路径未正确包含在 HttpSecurity#securityMatchers 的路径匹配中 (CVE-2026-22753) | 2026-04-22 | ||
| AVD-2026-22748 | 使用 withIssuerLocation 时可能出现安全配置错误 (CVE-2026-22748) | 2026-04-22 | ||
| AVD-2026-22747 | 使用 X.509 客户端证书时未经授权的用户模拟 (CVE-2026-22747) | 2026-04-22 | ||
| AVD-2026-22746 | 使用 DaoAuthenticationProvider 时的用户属性枚举 (CVE-2026-22746) | 2026-04-22 | ||
| AVD-2026-22751 | Spring Security JdbcOneTimeTokenService 允许一次性令牌对多个会话进行身份验证 (CVE-2026-22751) | 2026-04-22 | ||
| AVD-2026-22732 | Spring Security响应头丢失漏洞(CVE-2026-22732) | 2026-03-20 | ||
| AVD-2024-38810 | Spring Security @AuthorizeReturnObject 权限绕过漏洞(CVE-2024-38810) | 2024-08-20 | ||
| AVD-2024-22234 | Spring Security isFullyAuthenticated 权限绕过漏洞（CVE-2024-22234） | 2024-02-19 | ||
| AVD-2023-34042 | VMware Spring Security 安全漏洞(CVE-2023-34042) | 2024-02-06 | ||
| AVD-2023-45669 | webauthn4j-spring-security 中的签名计数器值处理不当 (CVE-2023-45669) | 2023-10-17 | ||
| AVD-2023-34035 | Spring Security鉴权规则错误配置风险（CVE-2023-34035） | 2023-07-19 | ||
| AVD-2023-34034 | Spring Security 路径匹配权限绕过漏洞（CVE-2023-34034） | 2023-07-18 | ||
| AVD-2023-20862 | Spring Security Logout实现不当（CVE-2023-20862） | 2023-04-18 | ||
| AVD-2022-31690 | VMware Spring Security权限管理错误漏洞（CVE-2022-31690） | 2022-11-01 | ||
| AVD-2022-31692 | Spring Security forward/include 认证绕过漏洞（CVE-2022-31692） | 2022-11-01 |