The vulnerability of the mvcRequestMatch component in the Java framework for securing industrial applications using Spring Security allows attackers to compromise the integrity of protected information.

🗓️ 13 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

mvcRequestMatch vulnerability enables data protection flaw exploitation compromising integrity.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX is affected by security restriction bypass due to Spring Framework [CVE-2023-20860]	18 May 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2023-20860, CVE-2023-20861).	10 May 202304:23	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Framework is vulnerable to CVE-2023-20860 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	5 Jul 202318:31	–	ibm

Vulners

Node

broadcom spring_securityRange6.0.0–6.0.6

OR

broadcom spring_securityRange5.3.0–5.3.25

Source	Link
spring	www.spring.io/security/cve-2023-20860
web	www.web.nvd.nist.gov/view/vuln/detail

11 May 2023 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.63842

mvcRequestMatch Java framework Spring Security data protection integrity vulnerability exploitation