cve-2023-34035-mitigations

Dieses Repository enthält eine Reihe von Beispielen, die die Konstellationen demonstrieren, in denen Anwendungen anfällig für https://spring.io/security/cve-2023-34035CVE-2023-34035 sein können. Eine Anwendung ist anfällig, wenn alle der folgenden Bedingungen zutreffen: Spring MVC befindet sich i...

EUVD-2023-1959

Malicious code in bioql PyPI...

CVE-2023-34035

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchersString and multiple servlets, one of them being Spring MVC’s DispatcherServlet. DispatcherServlet is a Spring...

Authorization Rule Misconfiguration

spring-security-config is vulnerable to Authorization Rule Misconfiguration. The vulnerability exists due to the lack of validation in the RequestMatcher of AbstractRequestMatcherRegistry.java when the application uses the requestMatchersString function with multiple servlets, one of them being...

CVE-2023-34035

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchersString and multiple servlets, one of them being Spring MVC’s DispatcherServlet. DispatcherServlet is a Spring...