2 matches found
GHSA-X2R2-RVHQ-2MQV Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is stored in the cookie and is us...
6.1CVSS4.8AI score0.00211EPSS
SaveExploits0References5
20