CVE-2025-22223

🗓️ 24 Mar 2025 17:42:49Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 272 Views

Spring Security versions 6.4.0 to 6.4.3 may have authorization bypass vulnerabilities.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to security annotations on parameterized types or methods. This may cause an authorization bypass.	28 Mar 202520:28	–	ibm
IBM Security Bulletins	Security Bulletin: Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations. This may cause an authorization bypass, which affects IBM watsonx.data	25 Jul 202512:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
Chainguard	CVE-2025-22223 vulnerabilities	27 Mar 202522:13	–	cgr
Circl	CVE-2025-22223	20 Mar 202507:23	–	circl
CNNVD	VMware Spring Security 安全漏洞	24 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-22223	24 Mar 202517:42	–	cvelist
EUVD	EUVD-2025-7998	3 Oct 202520:07	–	euvd
Github Security Blog	Spring Security Vulnerable to Authorization Bypass via Security Annotations	24 Mar 202518:31	–	github
NVD	CVE-2025-22223	24 Mar 202518:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Spring Security",
    "vendor": "Spring",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0-6.4.3"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2025-22223

17 Jun 2026 08:45Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3

EPSS0.00485

SSVC

CWE-290

cve-2025-22223 spring security authorization bypass method security vulnerabilities