cc.chensoul.nacos:nacos-distribution (=2.5.2), cn.sparrowmini:sparrow-org-service (=0.0.1) +625 more potentially affected by CVE-2023-20862 via org.springframework.security:spring-security-core (>=5.8.0 <=5.8.2)

🗓️ 19 Apr 2023 21:30:26Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 osv.dev👁 3 Views

Spring Security core versions 5.8.0 to 5.8.2 are affected by CVE-2023-20862 via transitive dependencies.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2023-20862	27 Jun 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager May 2023 - Multiple CVEs	7 Jun 202307:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Common Licensing's Administration And Reporting Tool (ART) and IBM LKS Administration Agent are affected by Spring Framework vulnerabilities.	30 Jul 202416:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in VMware Tanzu Spring Security (CVE-2023-20862)	20 Jul 202316:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	31 May 202319:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Web Query for i is vulnerable to a remote attacker bypassing security restrictions or executing arbitrary code, to a local authenticated attacker obtaining sensitive information, or to denial of service.	3 Jan 202420:25	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2022-31692 and CVE-2023-20862 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:36	–	ibm
Atlassian	Update Spring-Security used on Bitbucket to fix CVE-2023-20862	23 Jun 202319:25	–	atlassian

16 Feb 2024 08:23Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.3

EPSS0.00461

SSVC

nacos distribution sparrow org service sparrow pem service buession security spring para server jl incubator jl smalltools mongodb jl smalltools spring service api service authorization para jar para war osv advisory cve 2023 20862