Lucene search
+L

1 matches found

Spring Security Advisories
Spring Security Advisories
added 2025/03/19 12:00 a.m.48 views

Spring Security BCryptPasswordEncoder does not enforce maximum password length

BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same...

7.4CVSS7.3AI score0.00588EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder