Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7622
HistoryOct 19, 2018 - 5:39 a.m.

Privilege Escalation

2018-10-1905:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.003

Percentile

70.4%

spring-security-oauth2 is vulnerable to privilege escalation. The library does not properly handle the AuthorizationRequest parameter state, allowing a malicious user to pass a request to an approval endpoint and modify a previous authorization request, leading to a privilege escalation.

EPSS

0.003

Percentile

70.4%