Spring Spring Security OAuth vulnerabilities (CVE)

CVE records published for Spring Spring Security OAuth, newest first. Follow to get an email when a new one appears.

2 results
4.2Medium
CVE-2019-11269

Open Redirector in spring-security-oauth2

Spring Spring Security OAuth

Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user o…

8.9%EPSS
Unscored
CVE-2019-3778

Open Redirect in spring-security-oauth2

Spring Spring Security OAuth

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

17%EPSS