Authorization bypass in Spring Security
In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22978US | critical9.8OT high | Exploit | ||
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet contain… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/anchore/grype/issues/2158WEB
- https://github.com/spring-projects/spring-securityPACKAGE
- https://github.com/spring-projects/spring-security/blob/main/web/src/main/java/org/springframework/security/web/util/matcher/RegexRequestMatcher.javaWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-22978ADVISORY
- https://security.netapp.com/advisory/ntap-20220707-0003WEB
- https://spring.io/security/cve-2022-22978WEB
- https://tanzu.vmware.com/security/cve-2022-22978WEB
- https://www.oracle.com/security-alerts/cpujul2022.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan