Lucene search
GoogleOSV:CVE-2022-22978HistoryMay 19, 2022 - 3:15 p.m.
CVE-2022-22978
2022-05-1915:15:08
Google
osv.dev
15
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring-security | eq | 5.6.0 | |
| spring-security | eq | 5.6.3 | |
| spring-security | eq | 5.6.2 | |
| spring-security | eq | 5.6.1 |
References
Related
osv
osv
Authorization bypass in Spring Security
2022-05-20 00:00:39
githubexploit
githubexploit
Exploit for Incorrect Authorization in Vmware Spring Security
2023-03-16 09:34:17
Exploit for Incorrect Authorization in Vmware Spring Security
2022-07-13 12:38:26
Exploit for Incorrect Authorization in Vmware Spring Security
2022-06-04 16:57:18
ibm
ibm
nessus
nessus
Spring Security < 5.5.7 / 5.6.x < 5.6.4 Authorization Bypass
2023-01-26 00:00:00
Oracle MySQL Enterprise Monitor (Jan 2023 CPU)
2023-01-20 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3299)
2024-04-28 00:00:00
nvd
nvd
CVE-2022-22978
2022-05-19 15:15:08
veracode
veracode
Authorization Bypass
2022-05-20 13:00:01
cvelist
cvelist
CVE-2022-22978
2022-05-19 00:00:00
prion
prion
Authorization
2022-05-19 15:15:00
redhatcve
redhatcve
CVE-2022-22978
2022-05-18 22:58:31
ubuntucve
ubuntucve
CVE-2022-22978
2022-05-19 00:00:00
cve
cve
CVE-2022-22978
2022-05-19 15:15:08
github
github
Authorization bypass in Spring Security
2022-05-20 00:00:39
spring
spring
CVE-2022-22976: BCrypt skips salt rounds for work factor of 31
2022-05-16 05:32:00
CVE-2022-22978: Authorization Bypass in RegexRequestMatcher
2022-05-16 05:27:00
qualysblog
qualysblog
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
redhat
redhat
(RHSA-2023:3299) Important: jenkins and jenkins-2-plugins security update
2023-05-24 17:06:51
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00