Lucene search
+L

2 matches found

OSV
OSV
added 2026/06/10 12:31 a.m.5 views

GHSA-X2R2-RVHQ-2MQV Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is stored in the cookie and is us...

6.1CVSS4.8AI score0.00211EPSS
SaveExploits0References5
Rows per page
Query Builder