Red Hat Security AdvisoryRHSA-2023:3771
Red Hat Virtualization security and bug fix update
Released 2023-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-dependencies-4.5.3-1.el8ev
Fixes 2 records
Priority MEDIUM 45
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spri…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03514 · Published 2023-03-27 · Partial fix · 6.0.7, 5.3.26
Priority LOW 31
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0097 · Published 2023-03-23 · Partial fix · 6.0.7, 5.3.26 +1 CWE-400
