CVE-2026-22753: Spring Security: güvenlik açığı

Açıklama (NVD)

Vulnerability in Spring Spring Security. If an application is using securityMatchers(String) and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not be exercised as intended by the application. This can lead to the authentication, authorization, and other security controls being rendered inactive on intended requests.This issue affects Spring Security: from 7.0.0 through 7.0.4.

Özet bilgiler

Ürün

Vmware Spring Security

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

%0,25 (yüzdelik 16)

CWE

CWE-693

Yama

Geçici çözüm

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• spring.io
• CWE-693