io.undertow:undertow-servlet (1.0.11.final), io.undertow:undertow-websockets-jsr (1.0.11.final) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.11.final)

io.undertow:undertow-core MAVEN version 1.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.11.final - io.undertow:undertow-websockets-jsr 1.0.11.final Source...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

io.undertow:undertow-servlet (1.0.0.beta5), io.undertow:undertow-websockets-jsr (1.0.0.beta5) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta5)

io.undertow:undertow-core MAVEN version 1.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta5 - io.undertow:undertow-websockets-jsr 1.0.0.beta5 Source cves:...

io.undertow:undertow-servlet (1.3.30.final), io.undertow:undertow-websockets-jsr (1.3.30.final) +6 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.30.final)

io.undertow:undertow-core MAVEN version 1.3.30.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.30.final - io.undertow:undertow-websockets-jsr 1.3.30.final -...

io.undertow:undertow-servlet (1.0.0.beta32), io.undertow:undertow-websockets-jsr (1.0.0.beta32) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta32)

io.undertow:undertow-core MAVEN version 1.0.0.beta32 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta32 - io.undertow:undertow-websockets-jsr 1.0.0.beta32 Source...

io.undertow:undertow-servlet (1.0.0.beta11), io.undertow:undertow-websockets-jsr (1.0.0.beta11) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta11)

io.undertow:undertow-core MAVEN version 1.0.0.beta11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta11 - io.undertow:undertow-websockets-jsr 1.0.0.beta11 Source...

io.undertow:undertow-servlet (1.0.3.final), io.undertow:undertow-websockets-jsr (1.0.3.final) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.3.final)

io.undertow:undertow-core MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.3.final - io.undertow:undertow-websockets-jsr 1.0.3.final Source cves:...

io.undertow:undertow-servlet (1.0.0.beta21), io.undertow:undertow-websockets-jsr (1.0.0.beta21) +1 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta21)

io.undertow:undertow-core MAVEN version 1.0.0.beta21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta21 - io.undertow:undertow-websockets-jsr 1.0.0.beta21 -...

io.undertow:undertow-servlet (1.0.0.alpha20), io.undertow:undertow-websockets-jsr (1.0.0.alpha20) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha20)

io.undertow:undertow-core MAVEN version 1.0.0.alpha20 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha20 - io.undertow:undertow-websockets-jsr 1.0.0.alpha20 Source...

io.undertow:undertow-servlet (1.0.0.alpha18), io.undertow:undertow-websockets-jsr (1.0.0.alpha18) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha18)

io.undertow:undertow-core MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha18 - io.undertow:undertow-websockets-jsr 1.0.0.alpha18 Source...

io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

io.undertow:undertow-servlet (1.0.0.cr2), io.undertow:undertow-websockets-jsr (1.0.0.cr2) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.cr2)

io.undertow:undertow-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr2 - io.undertow:undertow-websockets-jsr 1.0.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta2), io.undertow:undertow-websockets-jsr (1.0.0.beta2) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta2)

io.undertow:undertow-core MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta2 - io.undertow:undertow-websockets-jsr 1.0.0.beta2 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta2), io.undertow:undertow-websockets-jsr (1.1.0.beta2) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.1.0.beta2)

io.undertow:undertow-core MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta2 - io.undertow:undertow-websockets-jsr 1.1.0.beta2 Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha16), io.undertow:undertow-websockets-jsr (1.0.0.alpha16) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha16)

io.undertow:undertow-core MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha16 - io.undertow:undertow-websockets-jsr 1.0.0.alpha16 Source...

Authorization bypass in Spring Security

In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass...

GHSA-HH32-7344-CG2F Authorization bypass in Spring Security

In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass...

CVE-2022-22978

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an...

CVE-2022-22978

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an...

Authorization

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an...