Authorization bypass in Spring Security
In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-22978US | critical9.8OT hoch | Exploit | ||
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet contain… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/anchore/grype/issues/2158WEB
- https://github.com/spring-projects/spring-securityPACKAGE
- https://github.com/spring-projects/spring-security/blob/main/web/src/main/java/org/springframework/security/web/util/matcher/RegexRequestMatcher.javaWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-22978ADVISORY
- https://security.netapp.com/advisory/ntap-20220707-0003WEB
- https://spring.io/security/cve-2022-22978WEB
- https://tanzu.vmware.com/security/cve-2022-22978WEB
- https://www.oracle.com/security-alerts/cpujul2022.htmlWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan