PT-2023-2259

🗓️ 20 Mar 2023 00:00:00Reported by Positive TechnologiesType

Vulnerability in Spring Framework may allow security bypass via incorrect pattern matching in configurations.

Reporter	Title	Published	Views	Family All 595
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)	1 Apr 202416:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of VMWare Tanzu Spring Framework, IBM DevOps Build is vulnerable to remote attacker to conduct phising attacks	3 Feb 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to open redirect vulnerability in VMware Tanzu Spring Framework ( CVE-2024-22243)	28 Jun 202416:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in VMware Tanzu Spring Framework (CVE-2023-20863)	20 Jul 202316:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects BigReplicate (CVE-2024-51504, CVE-2024-38821, CVE-2023-20863)	26 Aug 202520:26	–	ibm

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20860.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-22243
github	www.github.com/advisories/GHSA-w3c8-7r8f-9jp8
spring	www.spring.io/security/cve-2024-38808
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-20863
github	www.github.com/advisories/GHSA-cx7f-g6mp-7hqm
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-38828
ubuntu	www.ubuntu.com/security/CVE-2023-20860
t	www.t.me/cibsecurity/60849
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22741

12 Oct 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.17.5 - 8.1

EPSS0.03967

SSVC