Access Control Error Vulnerability in Spring Security

Spring Security is a Spring-based enterprise applications can provide a declarative security access control solution for the security framework . It provides a set of beans that can be configured in the Spring application context , taking full advantage of the Spring IoC, DI (Control Inversion Inversion of Control ,DI: Dependency Injection Dependency Injection) and AOP (for the cutting-edge programming) functionality for the application system to provide a declarative security access control functionality , reducing the work of writing a large number of repetitive code for enterprise system security control . Spring Security has an Access Control Error vulnerability that can be exploited by attackers for authentication and authorization bypass.