Skip to content

Critical Vulnerabilities fixes azure spring_core, spring-security-core, spring-beans

Jayesh Bagul requested to merge az/jb_vulnerability_fix_azure into master

  1. spring-beans:
    Improper Neutralization of Special Elements used in an OS Command in org.springframework/spring-beans
    Vulnerability spring-beans issue

  2. spring-core:
    "OS Command Injection," which occurs when an application allows user-controlled input to be inserted into a system command without proper sanitization or validation. vulnerability was located in the org.springframework/spring-core library
    Vulnerability spring-core Issue

  3. spring-security-core: RegexRequestMatcher might easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass.
    Vulnerability spring-security-core Issue

Edited by Jayesh Bagul

Merge request reports