Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/04/22 6:30 a.m.•22 views

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers

Vulnerability in Spring Spring Security. If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the...

7.5CVSS7.2AI score0.00248EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/04/22 6:16 a.m.•21 views

CVE-2026-22753

Vulnerability in Spring Spring Security. If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the...

7.5CVSS0.00248EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/22 5:20 a.m.•12 views

CVE-2026-22753 Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers

Vulnerability in Spring Spring Security. If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the...

7.5CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/22 5:20 a.m.•49 views

CVE-2026-22753 Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers

Vulnerability in Spring Spring Security. If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the...

7.5CVSS0.00248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•2 views

CVE-2026-22753: Protection Mechanism Failure

Vulnerability in Spring Spring Security. If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the...

7.5CVSS5.8AI score0.00248EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
•added 2026/04/20 12:00 a.m.•23 views

Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers

If an application is using securityMatchersString and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the application. This can lead to the authentication,...

7.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder