Lucene search
+L

10 matches found

OSV
OSV
added 2026/04/28 3:30 p.m.17 views

GHSA-4G9C-3X4P-MFPP Spring gRPC SecurityContext leaks across requests upon authorization failure

When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain escalated permissions. Affected versions:...

4.2CVSS5.8AI score0.00171EPSS
SaveExploits0References3
Rows per page
Query Builder