Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Pivotal Component: Spring Security Oauth Clear all filters
TI-2022-07146 CVE-2022-22969 · GHSA-c2cp-3xj9-97w9

Uncontrolled resource consumption in Spring Security OAuth

Priority LOW 31

<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 C…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01253 Published 2022-04-21 Fixed in 2.5.2.RELEASE, 2.4.2.RELEASE CWE-400
TI-2016-04299 CVE-2016-4977 · GHSA-7q9c-h23x-65fq

When processing authorization requests using the whitelabel views in Spring Security…

Priority HIGH 78

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user t…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.79176 Published 2017-05-25 Fixed in 2.0.10, 1.0.5 CWE-19