CVE-2023-34034

Access Control Bypass in Spring Security

Description

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

Patch Available

Fix available through Seal Security.  
No upgrade required, protect your application instantly.

Fix without upgrading

Score

Severity

Ecosystem

Java

Publish Date

July 19, 2023

Modified Date

October 28, 2024

Score Vector

Affected Versions