am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +94 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.1.4.release)

org.springframework.security:spring-security-core MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =3.0.1....

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

com.github.jackpanz:maccloud-core (>=2.4.7, <=2.4.8), com.gwtincubator:gwt-incubator-security (1.0.1) +74 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (2.0.4)

org.springframework.security:spring-security-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.jackpanz:maccloud-core =2.4.7, =1.1-1, =1.1-2 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.27-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.27-release) +99 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.0.release)

org.springframework.security:spring-security-core MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-releas...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +319 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.0.3.release)

org.springframework.security:spring-security-core MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: -...

com.racquettrack:spring-security-oauth2-client (1.4), com.sitewhere:sitewhere-core (0.9.7) +40 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.1.1.release)

org.springframework.security:spring-security-core MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.racquettrack:spring-security-oauth2-client 1.4 -...

co.paralleluniverse:comsat-spring-boot-security (0.5.0), co.paralleluniverse:comsat-spring-security (0.5.0) +96 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.0.2.release)

org.springframework.security:spring-security-core MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.5.0...

com.17jee:e-cloud-authorize (3.0.0.release), com.17jee:e-cloud-gateway (>=3.0.0, <=3.0.1.1) +47 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.8.release)

org.springframework.security:spring-security-core MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.17jee:e-cloud-authorize 3.0.0.release -...

GHSA-F3JH-QVM4-MG39 Erroneous authentication pass in Spring Security

In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVotervote passing a null...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

be.jidoka:jdk-keycloak-admin (>=2.0.0, <=2.2.0), be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.2.release) +1829 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (>=6.0.0, <=6.1.7)

org.springframework.security:spring-security-core MAVEN version =6.0.0, =2.0.0, =1.5.1.release, =1.1.0, =1.1.0, =1.1.4.2, =1.1.5 - cc.vihackerframework:vihacker-auth-starter 1.0.8.r - cc.vihackerframework:vihacker-common-starter 1.0.8.r - cc.vihackerframework:vihacker-log-starter 1.0.8.r -...

at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +90 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.9.release)

org.springframework.security:spring-security-core MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.4.releas...

co.paralleluniverse:comsat-spring-boot-security (0.7.0), co.paralleluniverse:comsat-spring-security (0.7.0) +381 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.0.4.release)

org.springframework.security:spring-security-core MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.7.0...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.11), ch.sharedvd.tipi:tipi-engine (>=1.1.10, <=1.1.11) +162 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.7.release)

org.springframework.security:spring-security-core MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

app.valuationcontrol:library (>=0.5.2, <=0.5.6), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +1446 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (>=6.2.0, <=6.2.2)

org.springframework.security:spring-security-core MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =3.2.0.0, =3.2.0.0, =3.2.0.0, =3.2.0.0, =3.2.2.2 and more Source cves: CVE-2024-22257 Source advisory: OSV:GHSA-F3JH-QVM4-MG39...

com.cedac.spring.security:spring-security-mongodb (1.0.0), com.foreach.across.modules:admin-web-module (>=1.0.0.release, <=1.1.0.release) +127 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.7.release)

org.springframework.security:spring-security-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.cedac.spring.security:spring-security-mongodb 1.0...

cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1) +328 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.5.release)

org.springframework.security:spring-security-core MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.home1:spring-cloud-config-server =0.0.1, =0.0.1,...

com.auth0:auth0-spring-security-api (>=1.4.1, <=1.5.3), com.dahuatech.harriet.icc:eco-brm-client (>=1.0.1, <=1.0.1.4) +123 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.20.release)

org.springframework.security:spring-security-core MAVEN version 4.2.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:auth0-spring-security-api =1.4.1, =1.0.1,...

Erroneous authentication pass in Spring Security

In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVotervote passing a null...

com.addc:addc-svr-iiop (2.5), com.addc:addc-svr-mvc (2.5) +225 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.4.release)

org.springframework.security:spring-security-core MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.addc:addc-svr-iiop 2.5 - com.addc:addc-svr-mvc 2....