1 matches found
Spring Security BCryptPasswordEncoder does not enforce maximum password length
BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same...
7.4CVSS7.3AI score0.00588EPSS
SaveExploits0References1Affected Software1
20