at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +128 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.3.release)

org.springframework.security:spring-security-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.releas...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +48 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.4.release)

org.springframework.security:spring-security-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

com.ctlok:spring-webmvc-rythm (>=1.3.6, <=1.4.2), com.github.leleuj.springframework.security:spring-security-oauth-client (>=1.0.0, <=1.1.0) +137 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.0.release)

org.springframework.security:spring-security-core MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.ctlok:spring-webmvc-rythm =1.3.6, =1.0.0, =3.0.4,...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc1, <=4.0.0-rc3) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.2.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc1,...

org.springframework.security:spring-security-acl (3.1.5.release), org.springframework.security:spring-security-aspects (3.1.5.release) +7 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.5.release)

org.springframework.security:spring-security-core MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl...

at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +90 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.9.release)

org.springframework.security:spring-security-core MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.4.releas...

com.force.sdk:force-springsecurity (>=22.0.2-beta, <=22.0.9-beta), com.logitags:cibet (>=1.1, <=1.9) +24 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.3.release)

org.springframework.security:spring-security-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.force.sdk:force-springsecurity =22.0.2-beta, =1.1...

org.eobjects.datacleaner:datacleaner-completeness-analysis-wizard (>=3.5.9, <=3.7.4), org.eobjects.datacleaner:datacleaner-copy-data-wizard (>=3.5.9, <=3.7.4) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.1.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: -...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

com.arsframework:ars-module-cms (>=1.0.0, <=1.1.4), com.arsframework:ars-module-educate (>=1.0.0, <=1.1.0) +186 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.3.release)

org.springframework.security:spring-security-core MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.arsframework:ars-module-cms =1.0.0, =1.0.0, =1.0....

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse.archetypes:appfuse-archetypes (2.1.0-m2) +53 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.4.release)

org.springframework.security:spring-security-core MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-acl (3.1.6.release) +11 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.6.release)

org.springframework.security:spring-security-core MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4....

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

com.github.btheu.settesting:spring (0.1.0), org.pac4j:spring-security-pac4j (>=1.2.3, <=1.2.4) +10 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.2.release)

org.springframework.security:spring-security-core MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.btheu.settesting:spring 0.1.0 -...

com.github.lrkwz:urlmanaged-locale (0.0.1), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +69 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.7.release)

org.springframework.security:spring-security-core MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.lrkwz:urlmanaged-locale 0.0.1 -...

org.codehaus.enunciate:enunciate-spring-security-rt (>=1.20, <=1.22), org.codehaus.spring-security-oauth:spring-security-oauth (>=2.4, <=3.19) +20 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.3)

org.springframework.security:spring-security-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.codehaus.enunciate:enunciate-spring-security-rt =1.20,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.11), ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7) +2345 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (>=4.0.0.release, <=4.2.12.release)

org.springframework.security:spring-security-core MAVEN version =4.0.0.release, =0.1.8, =0.1.6, =0.1.4-sb1x, =1.0.0, =1.0.0, =1.0.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 and more Source cves: CVE-2019-11272 Source advisory: GHSA-V33X-PRHC-GPH5...

cn.dceast.platform:platform-security-starter (2.2.3), com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.0.114-release) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (>=4.0.1.release, <=4.2.8.release)

org.springframework.security:spring-security-cas MAVEN version =4.0.1.release, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.83-rc1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =0.3.1, =0.3.1, =0.3.2 - net.eulerframework:euler-web-authentication-impl-hibernate 0.3.9 and more Source cves...

com.17jee:e-cloud-authorize (3.0.0.release), com.17jee:e-cloud-gateway (>=3.0.0, <=3.0.1.1) +47 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.8.release)

org.springframework.security:spring-security-core MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.17jee:e-cloud-authorize 3.0.0.release -...