CVE-2022-22978-demo

CVE-2022-22978-demo CVE-2022-22978 vulnerability demo code Exploitation Conditions Although rated as high severity, the exploitation conditions are quite stringent. Personally, I find this vulnerability rather underwhelming. 1. First, spring-security must be within the affected scope. 2. Second, ...

cve-2022-31692

CVE-2022-31692 Demo Overview A simple Spring Boot application demonstrating configuration that is vulnerable to CVE-2022-31692. This vulnerability may attract attention due to its severity - it has a CVSS 3.x base score of 9.8 as it allows authentication bypass. The purpose of this project is to...

cve-2022-31692

CVE-2022-31692 Spring Security 授权绕过的一个演示。 请参阅 CVE-2022-31692 Spring Security 授权绕过 在 Don't Panic! 上。...

CVE-2022-22978

CVE 2022-22978: Bypass de autorización en RegexRequestMatcher 🥶 Resumen Según la información que he investigado, esta es una vulnerabilidad relacionada con la clase RegexRequestMatcher del framework Spring Security. En concreto, las aplicaciones que usan RegexRequestMatcher y que en su expresión...

cve-2023-34035-mitigations

此仓库是一组示例，用于演示应用程序可能受到 https://spring.io/security/cve-2023-34035CVE-2023-34035 影响的情况。 当以下所有条件都成立时，应用程序存在漏洞： Spring MVC 在 classpath 上 DispatcherServlet 和至少一个其他 Servlet 被映射；其中一个具有基于路径的 Servlet 映射（例如 /path/） 应用程序使用 requestMatchersString 来引用其 Servlet 映射形式为 /path/ 的端点 == 示例 这里有使用 Spring Boot 和不使用 Sprin...

CVE-2022-22978

CVE 2022-22978：RegexRequestMatcher中的授权绕过 🥶 概述 根据我研究的信息，这是与Spring Security框架中的RegexRequestMatcher 类相关的一个漏洞。具体来说，使用RegexRequestMatcher且正则表达式中包含点号（.）的应用程序，可以通过字符\r%0a、 \n%0d绕过；从而使攻击者无需认证即可访问不允许的路径。 受影响的Spring Security框架版本： 5.5.x 低于 5.5.7 5.6.x 低于 5.6.4 之前的不再支持的版本。 分析 我们需要访问Spring...

CVE-2022-22978

CVE-2022-22978 Spring-Security bypass Demo 在Spring Security中使用RegexRequestMatcher且规则中包含带点号的正则表达式时，攻击者可以通过构造恶意数据包绕过身份认证 影响范围 Spring Security 5.5.x Spring Security 5.6.x http://localhost:8080/admin/index%0a Docker docker pull s0cke3t/cve-2022-22978:latest...

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

This project provides support for using Spring Security with OAuth 1a and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms. Code of Conduct This project adheres to th...

CVE-2022-22978-PoC

CVE 2022-22978: Authorization Bypass in RegexRequestMatcher 🥶 Overview According to the information I have gathered, this vulnerability is related to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...

cve-2025-22235-demo

CVE-2025-22235: Spring Boot EndpointRequest.to 认证绕过漏洞演示 漏洞描述 CVE-2025-22235是一个Spring Boot安全漏洞，涉及EndpointRequest.to方法在配置安全规则时可能生成错误的匹配器，导致未暴露的执行器端点路径（如/null/）的安全保护失效。 影响版本 Spring Security 5.7.16 Spring Security 5.8.18 Spring Security 6.0.16 Spring Security 6.1.14 Spring Security 6.2.10 Spring...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 y CVE-2025-4427 CVE-2025-4428 es una vulnerabilidad de ejecución remota de código posterior a la autenticación en el validador DeviceFeatureUsageReportQueryRequestValidator de EPMM. Surge del manejo inseguro de la entrada proporcionada por el usuario dentro de los mensajes de error...

cve-2023-34034

cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection 分析复现篇 Exploit Title: Open Redirector in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Software Link:...

cve-2026-22732-poc

CVE-2026-22732 — Prueba de concepto Spring Security descarta silenciosamente las cabeceras de seguridad de las respuestas HTTP. Solo para uso demostrativo/educativo; ejecútalo únicamente contra esta aplicación local...

CVE-2022-22978

CVE-2022-22978: Bypass de autorización de Spring Security Resumen Spring Security es un framework de seguridad que proporciona autenticación y autorización en aplicaciones basadas en Spring. En Spring Security 5.5.6, 5.6.3 y versiones anteriores, al usar RegexRequestMatcher, una funcionalidad que...

rewrite-cve-2026-22732

rewrite-cve-2026-22732 Receta de OpenRewrite que detecta código susceptible a CVE-2026-22732, un defecto de Spring Security donde establecer Content-Length a través de uno de tres métodos de respuesta omite el OnCommittedResponseWrapper de Spring Security. Debido a que el wrapper nunca ve la...

xbootEncodePwd

xbootEncodePwd root@kitploit: xboot-activiti-1.0-SNAPSHOT xboot-cms-1.0-SNAPSHOT xboot-generator-1.0-SNAPSHOT xboot-app-1.0-SNAPSHOT xboot-core-1.0-SNAPSHOT xboot-open-1.0-SNAPSHOT xboot-autochat-1.0-SNAPSHOT xboot-docking-1.0-SNAPSHOT xboot-quartz-1.0-SNAPSHOT xboot-base-1.0-SNAPSHOT...

GSSC-CVE-2022-41923

Solución alternativa para CVE-2022-41923: Vulnerabilidad de Gestión de Privilegios Resumen La vulnerabilidad CVE-2022-41923 encontrada en el complemento Grails Spring Security Core GSSC sin parche puede dar lugar a una gestión de privilegios inadecuada. Este repositorio describe cómo solucionar e...

EUVD-2026-75707

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...