1 matches found
GHSA-5X25-C2RF-F2JX Spring Web Services: SOAP security faults leak Spring Security account state
Several Spring WS integration paths with Spring Security could surface detailed account state for example locked or disabled user semantics to remote SOAP clients through exception messages or callback outcomes, instead of failing with generic authentication errors. That behavior assists remote...
5.3CVSS5.4AI score0.00366EPSS
SaveExploits0References4
20