Skip to content

Product

org.springframework.security.oauth/spring-security-oauth vulnerabilities

2 published CVES affecting org.springframework.security.oauth/spring-security-oauth, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.security.oauth/spring-security-oauth CVEs

Newest publication first

  1. CVE-2019-11269 Open Redirector in spring-security-oauth2

    Published
    MediumCVSS 5.4 EPSS 8.9% Public exploit

    Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft...

  2. CVE-2019-3778 Open Redirect in spring-security-oauth2

    Published
    MediumCVSS 6.5 EPSS 16.6% Public exploit

    Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craf...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.